Lucene search
K

1332 matches found

Cvelist
Cvelist
added 2021/08/24 6:49 p.m.18 views

CVE-2021-30876

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

6.6AI score0.00364EPSS
Exploits0References3
NVD
NVD
added 2021/08/18 3:15 p.m.22 views

CVE-2021-21781

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version 5.11-rc4 seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a...

4CVSS0.00047EPSS
Exploits1References2
Prion
Prion
added 2021/08/18 3:15 p.m.30 views

Information disclosure

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version 5.11-rc4 seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a...

2.1CVSS5.1AI score0.00047EPSS
Exploits1References2Affected Software4
Apple
Apple
added 2021/07/21 12:0 a.m.59 views

About the security content of Security Update 2021-005 Mojave

About the security content of Security Update 2021-005 Mojave This document describes the security content of Security Update 2021-005 Mojave. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurre...

10CVSS9.7AI score0.01622EPSS
Exploits0References1Affected Software1
Metasploit
Metasploit
added 2021/07/09 5:42 p.m.48 views

Windows Process Memory Dump

This module creates a memory dump of a process to disk and downloads the file for offline analysis. Options for DUMPTYPE affect the completeness of the dump: "full" retrieves the entire process address space all allocated pages; "standard" excludes image files e.g. DLLs and EXEs in the address...

7AI score
Exploits0
CNVD
CNVD
added 2021/06/19 12:0 a.m.28 views

Google Chrome suffers from an information disclosure vulnerability (CNVD-2021-47672)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability. A remote attacker can exploit the vulnerability to obtain potentially sensitive information from process memory via specially crafted PDF files...

5.5CVSS6.4AI score0.00492EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2018:1129-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.02115EPSS
Exploits5References10
NVD
NVD
added 2021/06/01 2:15 p.m.10 views

CVE-2021-29740

IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An attacker could execute arbitrary code in the context of process memory, potentially escalating their system privileges and taking control over the...

8.4CVSS0.00073EPSS
Exploits0References2
OSV
OSV
added 2021/05/28 5:15 p.m.4 views

CVE-2013-4536

An user able to alter the savevm data either on the disk or over the wire during migration could use this flaw to to corrupt QEMU process memory on the destination host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...

7.8CVSS8.7AI score
Exploits0References4
CNVD
CNVD
added 2021/05/07 12:0 a.m.11 views

Exim out-of-bounds read vulnerability (CNVD-2021-34537)

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. An out-of-bounds read vulnerability exists in smtpsetupmsg in Exim, which can be exploited by an attacker to obtain sensitive information from process memory via an SMTP client...

7.5CVSS6AI score0.0298EPSS
Exploits1References1
NVD
NVD
added 2021/05/06 1:15 p.m.13 views

CVE-2020-28025

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory...

7.5CVSS0.01407EPSS
Exploits1References1
NVD
NVD
added 2021/05/06 1:15 p.m.15 views

CVE-2020-28023

Exim 4 before 4.94.2 allows Out-of-bounds Read. smtpsetupmsg may disclose sensitive information from process memory to an unauthenticated SMTP client...

7.5CVSS0.0298EPSS
Exploits1References1
Prion
Prion
added 2021/05/06 1:15 p.m.25 views

Design/Logic Flaw

Exim 4 before 4.94.2 allows Out-of-bounds Read. smtpsetupmsg may disclose sensitive information from process memory to an unauthenticated SMTP client...

5CVSS8.3AI score0.0298EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2021/05/06 1:15 p.m.26 views

Design/Logic Flaw

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory...

5CVSS8.1AI score0.01407EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/05/06 4:36 a.m.18 views

CVE-2020-28025

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory...

8.3AI score0.01407EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2021/05/06 4:36 a.m.46 views

CVE-2020-28025

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory...

7.5CVSS7.5AI score0.01407EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/05/06 4:36 a.m.26 views

CVE-2020-28025

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to a leak of sensitive information from process memory...

7.5CVSS7.8AI score0.01407EPSS
Exploits1
CVE
CVE
added 2021/05/06 4:24 a.m.328 views

CVE-2020-28023

CVE-2020-28023 is an Exim 4 vulnerability: an Out-of-bounds Read in smtp_setup_msg that can disclose sensitive memory to an unauthenticated SMTP client. Connected sources confirm Exim 4 before 4.94.2 is affected and that the issue is addressed in later releases (e.g., Exim 4.94.2 and accompanying...

7.5CVSS7.2AI score0.0298EPSS
Exploits1References1Affected Software1
AlpineLinux
AlpineLinux
added 2021/05/06 4:24 a.m.46 views

CVE-2020-28023

Exim 4 before 4.94.2 allows Out-of-bounds Read. smtpsetupmsg may disclose sensitive information from process memory to an unauthenticated SMTP client...

7.5CVSS7.6AI score0.0298EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/05/04 1:30 p.m.25 views

CVE-2020-28023

Exim 4 before 4.94.2 allows Out-of-bounds Read. smtpsetupmsg may disclose sensitive information from process memory to an unauthenticated SMTP client...

7.5CVSS7AI score0.0298EPSS
Exploits1References2
Rows per page
Query Builder