Lucene search
+L

1851 matches found

Veracode
Veracode
•added 2019/05/02 5:27 a.m.•37 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An off-by-one read vulnerability in the formatIPTCfromBuffer function in coders/meta.c allows a local attacker to crash the program or read beyond the process memory...

7.1CVSS7.6AI score0.01254EPSS
SaveExploits0References7Affected Software4
Veracode
Veracode
•added 2019/05/02 4:58 a.m.•38 views

Arbitrary Code Execution

KVM Kernel-based Virtual Machine is vulnerable to denial of service. Multiple buffer overflow, input validation, and out-of-bounds write flaws were found in the way the virtio, virtio-net, virtio-scsi, and usb drivers of QEMU handled state loading after migration. A user able to alter the savevm...

7.8CVSS8.4AI score0.00298EPSS
SaveExploits0References5Affected Software2
RedhatCVE
RedhatCVE
•added 2019/04/25 8:25 a.m.•36 views

CVE-2019-5810

Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS2.9AI score0.01079EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2019/04/25 8:24 a.m.•27 views

CVE-2019-5818

Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file...

6.5CVSS4.6AI score0.01614EPSS
SaveExploits0References4
Veracode
Veracode
•added 2019/04/25 6:06 a.m.•23 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An integer overflow in the BMP decoder allows an attacker to crash the process or gain access to unintended regions of the process memory...

6.5CVSS6.5AI score0.00584EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2019/04/24 5:29 p.m.•26 views

Code injection

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

5.8CVSS7.8AI score0.00517EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2019/04/24 5:29 p.m.•31 views

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS8.1AI score0.00531EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/24 5:29 p.m.•72 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS2.5AI score0.00517EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/24 5:29 p.m.•53 views

PYSEC-2019-222

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS2.3AI score0.00531EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/24 5:29 p.m.•27 views

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS8.1AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2019/04/24 4:17 p.m.•40 views

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1AI score0.00531EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/23 12:00 a.m.•1 views

PT-2019-19978

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108 Description The issue is related to an inappropriate implementation in accessibility features, allowing a remote attacker to obtain potentially sensitive information from process memory. This can b...

6.5CVSS0.00746EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2019/04/23 12:00 a.m.•4 views

PT-2019-3425

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108 Description The issue is related to an error in the autofill feature, allowing information to be retrieved from the process memory. A remote attacker can exploit this to gain access to confidential...

7.1CVSS0.01079EPSS
SaveExploits0
CNVD
CNVD
•added 2019/03/28 12:00 a.m.•4 views

Multiple Apple Products WebKit Memory Leak Vulnerability

Apple Safari is a web browser that is the default browser that comes with the MacOSX and iOS operating systems. apple iOS is a suite of operating systems for mobile devices. apple tvOS is a smart TV operating system. webKit is a component of the web browser engine. WebKit is one of the Web browse...

6.5CVSS6.3AI score0.01304EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/12 12:00 a.m.•14 views

The vulnerability of the linux-astra-modules package of the Astra Linux operating system, which allows a hacker to circumvent established security policy rules

The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an access control permission assignment error, which allows for bypassing the closed software environment by writing to /proc/$PID/mem. Exploiting this vulnerability can enable a perpetrator to...

6.3CVSS5.5AI score
SaveExploits0References1
OSV
OSV
•added 2019/03/05 4:29 p.m.•11 views

CVE-2019-6205

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes...

7.8CVSS7.2AI score0.04065EPSS
SaveExploits3References6
OSV
OSV
•added 2019/02/19 5:29 p.m.•11 views

DEBIAN-CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.5CVSS7AI score0.00541EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/02/19 5:29 p.m.•31 views

CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.5CVSS6.8AI score0.00541EPSS
SaveExploits0References1
NVD
NVD
•added 2019/02/19 5:29 p.m.•37 views

CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.5CVSS5.7AI score0.00541EPSS
SaveExploits0References7
Mend
Mend
•added 2019/02/19 5:00 p.m.•2 views

CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

6.8CVSS0.00541EPSS
SaveExploits0References12
Rows per page
Query Builder