Lucene search
+L

1358 matches found

Prion
Prion
added 2020/11/05 8:15 p.m.19 views

Design/Logic Flaw

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

4.3CVSS4.1AI score0.0306EPSS
SaveExploits0References2Affected Software4
Prion
Prion
added 2020/11/05 8:15 p.m.22 views

Input validation

Acrobat Reader versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage this vulnerability to...

4.3CVSS4.8AI score0.02447EPSS
SaveExploits0References1Affected Software4
Prion
Prion
added 2020/11/05 8:15 p.m.18 views

Design/Logic Flaw

Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

4.3CVSS4.1AI score0.0306EPSS
SaveExploits0References2Affected Software4
Tenable Nessus
Tenable Nessus
added 2020/03/13 12:0 a.m.40 views

EulerOS Virtualization for ARM 64 3.0.2.0 : libidn (EulerOS-SA-2020-1265)

According to the versions of the libidn package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byt...

7.5CVSS7.3AI score0.06721EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.73 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-2693)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.43823EPSS
SaveExploits32References4
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for libidn (EulerOS-SA-2019-2392)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.06721EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.36 views

EulerOS 2.0 SP3 : libidn (EulerOS-SA-2019-2608)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers...

7.5CVSS7.5AI score0.06721EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2019/10/10 10:13 p.m.42 views

CVE-2017-7771

An out of bounds read flaw related to "graphite2::Pass::readPass" has been reported in graphite2. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

7.5CVSS2.7AI score0.05216EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.4 views

PT-2019-2994 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows RDP server affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the Windows RDP server's memory contents. This could allow an attacker to obtain information that could b...

7.8CVSS7.8AI score0.09503EPSS
SaveExploits0References8
Veracode
Veracode
added 2019/05/02 6:12 a.m.20 views

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bounds reads. This vulnerability exists in "graphite2::Silf::readGraphite" in Graphite2 Library. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

9.1CVSS9AI score0.01419EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
added 2019/05/02 6:12 a.m.25 views

Denial Of Service (DoS)

Mozilla Firefox is an vulnerable to out-of-bounds reads. This exists in "graphite2::Pass::readPass" in Graphite2 Library. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

8.1CVSS8.6AI score0.01186EPSS
SaveExploits1References7Affected Software2
Prion
Prion
added 2019/01/30 10:29 p.m.19 views

Out-of-bounds

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

5.8CVSS6.6AI score0.49566EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
added 2019/01/30 10:0 p.m.32 views

CVE-2018-3956

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when...

6.8CVSS6.8AI score0.49566EPSS
SaveExploits1References1
Veracode
Veracode
added 2019/01/15 9:13 a.m.20 views

Denial Of Service (DoS)

rh-postgresql94-postgresql is vulnerable to denial of service DoS attacks. The vulnerability exists as PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service NULL pointer...

8.3CVSS8.7AI score0.05962EPSS
SaveExploits0References4Affected Software7
NVD
NVD
added 2018/12/04 4:29 p.m.23 views

CVE-2018-19854

An issue was discovered in the Linux kernel before 4.19.3. cryptoreportone and related functions in crypto/cryptouser.c the crypto user configuration API do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a...

4.7CVSS5.4AI score0.00433EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2018/12/04 4:0 p.m.33 views

CVE-2018-19854

An issue was discovered in the Linux kernel before 4.19.3. cryptoreportone and related functions in crypto/cryptouser.c the crypto user configuration API do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a...

5.5AI score0.00433EPSS
SaveExploits0References10
Mageia
Mageia
added 2018/10/19 6:0 p.m.34 views

Updated tcpflow packages fix security vulnerability

pdated tcpflow package fixes security vulnerability: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the functio...

9.1CVSS3.7AI score0.02753EPSS
SaveExploits1References2
OSV
OSV
added 2018/10/19 6:0 p.m.7 views

MGASA-2018-0401 Updated tcpflow packages fix security vulnerability

pdated tcpflow package fixes security vulnerability: An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the functio...

9.1CVSS9.3AI score0.02753EPSS
SaveExploits1References3
NVD
NVD
added 2018/08/05 3:29 a.m.15 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS9.2AI score0.02753EPSS
SaveExploits1References4
OSV
OSV
added 2018/08/05 3:29 a.m.22 views

CVE-2018-14938

An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handleprism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle80211, which will result in an out-of-bounds...

9.1CVSS6.9AI score
SaveExploits0References4
Rows per page
Query Builder