Lucene search
+L

1015 matches found

CNVD
CNVD
added 2022/02/09 12:0 a.m.44 views

Linux kernel elevation of privilege vulnerability (CNVD-2022-68594)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a security flaw that is caused by post-release usage in Kernel/ucount. An attacker could exploit this vulnerability to gain elevated privileges on the system...

7.8CVSS3.5AI score0.0101EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/01/29 12:0 a.m.6 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a security flaw that is caused by post-release usage in Kernel/ucount. An attacker could exploit this vulnerability to gain elevated privileges on the system...

7.8CVSS8.2AI score0.0101EPSS
Exploits2References8
CNVD
CNVD
added 2022/01/25 12:0 a.m.42 views

Adobe Acrobat Reader Dc Resource Management Error Vulnerability (CNVD-2022-11154)

Adobe Acrobat Reader Dc is a Pdf reading tool from the American company Adobe. It is used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader Dc suffers from a resource management error vulnerability, which stems from a post-release usage error when processing PDF files. A...

7.8CVSS3.3AI score0.11546EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/12 12:0 a.m.59 views

Adobe Acrobat and Reader Resource Management Error Vulnerability

Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which is caused by a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...

9.3CVSS3.2AI score0.10801EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.8 views

Adobe Acrobat and Reader 资源管理错误漏洞

Adobe Acrobat, a PDF file editing and conversion tool from Adobe, is vulnerable to a resource management error in Adobe Acrobat and Reader, which results from a post-release usage error when processing PDF files. A remote attacker could exploit the vulnerability to create a specially crafted PDF...

9.3CVSS6.1AI score0.08656EPSS
Exploits0References4
CNVD
CNVD
added 2022/01/05 12:0 a.m.61 views

Google Android Kernel elevation of privilege vulnerability (CNVD-2022-01771)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the Google Android Kernel. The vulnerability stems from an out-of-bounds write in periodicioworkfunc in lwisperiodicio.c due to reuse after release. An attacker can exploit...

6.7CVSS6.6AI score0.00118EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/28 12:0 a.m.4 views

Adobe Premiere Pro Post-Release Reuse Vulnerability

Adobe Premiere Pro is a non-linear video editing software developed by Adobe, which is widely used in the professional production of movies, TV and web videos, providing a full-process solution from clip editing to finished output. A post-release reuse vulnerability exists in Adobe Premiere Pro,...

5.5CVSS6.7AI score0.003EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/12/16 12:0 a.m.4 views

QEMU 资源管理错误漏洞

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in the NVM Express Controller NVME emulation in QEMU that stems from a data structure being released when a reentrant write...

8.2CVSS8.2AI score0.00643EPSS
Exploits2References13
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.3 views

Adobe Premiere Pro 资源管理错误漏洞

Adobe Premiere Pro is a non-linear video editing software developed by Adobe, which is widely used in the professional production of movies, TV and web videos, providing a full-process solution from clip editing to finished output. A post-release reuse vulnerability exists in Adobe Premiere Pro,...

5.5CVSS5.7AI score0.003EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.4 views

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View is a free viewer from Bentley Systems, U.S.A. A security vulnerability exists in Bentley View, which is caused by post-release usage when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

7.8CVSS6.2AI score0.01937EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.5 views

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. The vulnerability stems from a post-release reuse and out-of-bounds write vulnerability in setClientStateLocked in SurfaceFlinger.cpp. An attacker could exploit the vulnerability to cause a local privilege escalation...

7.8CVSS5.8AI score0.00113EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a resource management error vulnerability that stems from post-release reuse in the window manager...

8.8CVSS8.1AI score0.01237EPSS
Exploits0References15
CNVD
CNVD
added 2021/12/01 12:0 a.m.52 views

Open Design Alliance Drawings SDK Post-release Reuse Vulnerability (CNVD-2022-00615)

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

7.8CVSS3.5AI score0.00855EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/11/30 12:0 a.m.7 views

Lucet 资源管理错误漏洞

Lucet is an open source, native WebAssembly compiler and runtime from the Bytecode Alliance organization. Lucet has a resource management error vulnerability that stems from the presence of post-release usage in Lucet's Instance object, which can be exploited by attackers to cause memory...

8.5CVSS5.6AI score0.01566EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.7 views

Open Design Alliance Drawings SDK 资源管理错误漏洞

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

7.8CVSS6.1AI score0.00855EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/11/18 12:0 a.m.6 views

Gcc C++filt 资源管理错误漏洞

Gcc C++filt is a filter from the Gnu community. It is used to disambiguate compiled C++ names. A resource management error vulnerability exists in GCC c++filt v2.26, which stems from the presence of a post-release use in the component cplus-dem.c. The vulnerability is caused by the presence of th...

7.8CVSS7.7AI score0.00853EPSS
Exploits1References3
CNVD
CNVD
added 2021/11/18 12:0 a.m.48 views

GOCR post-release reuse vulnerability

GOCR is an open source OCR Optical Character Recognition program. a post-release reuse vulnerability exists in the contextcorrection in pgm2asc.c in GOCR 0.53-20200802 and earlier versions. No detailed vulnerability details are currently available...

5.5CVSS2.5AI score0.01EPSS
Exploits1References1
CNVD
CNVD
added 2021/11/16 12:0 a.m.19 views

Google Chrome post-release reuse vulnerability (CNVD-2022-12743)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in the loader in versions of Google Chrome prior to 96.0.4664.45. An attacker could use this vulnerability to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score0.00982EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/16 12:0 a.m.33 views

Google Chrome post-release reuse vulnerability (CNVD-2022-12742)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Storage Foundation in Google Chrome versions prior to 96.0.4664.45. An attacker can potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score0.00813EPSS
Exploits0References1
CNVD
CNVD
added 2021/10/29 12:0 a.m.33 views

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99261)

A post-release reuse vulnerability exists in "Web Transfer" in versions of Google Chrome prior to 95.0.4638.69, a simple and efficient web browsing tool developed by Google. The vulnerability can be exploited to escape via a carefully crafted HTML surface execution sandbox...

9.6CVSS3.6AI score0.00942EPSS
Exploits0References1
Rows per page
Query Builder