Lucene search
+L

1797 matches found

CNVD
CNVD
added 2024/03/01 12:00 a.m.42 views

Mozilla Firefox Out-of-Bounds Read Vulnerability (CNVD-2024-12552)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an out-of-bounds read vulnerability that originates from a buffer length that may be obfuscated when data is stored and re-accessed over a network channel, which can be...

7.5CVSS6.2AI score0.00718EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/02/29 11:32 a.m.36 views

CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

4.4CVSS6.4AI score0.00233EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/29 6:15 a.m.22 views

UBUNTU-CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

5.5CVSS6.1AI score0.00233EPSS
SaveExploits0References9
Prion
Prion
added 2024/02/29 6:15 a.m.26 views

Null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

6.5AI score0.00233EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/02/29 5:43 a.m.30 views

CVE-2023-52477 usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

6.5AI score0.00233EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.9 views

Cisco NX-OS Software Security Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software used by Cisco switches in the United States. A security vulnerability exists in Cisco NX-OS Software. An attacker could exploit this vulnerability to cause a denial of service...

8.6CVSS6.6AI score0.00709EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/02/29 12:00 a.m.68 views

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2024-11664)

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

5.5CVSS6AI score0.02385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.14 views

Lexmark Security Breach

Lexmark is a series of printers in the United States. A security vulnerability exists in Lexmark devices that stems from a memory corruption vulnerability in the PostScript interpreter. An attacker could exploit the vulnerability to execute arbitrary code...

9CVSS7.4AI score0.00766EPSS
SaveExploits0References2
ICS
ICS
added 2024/02/27 12:00 p.m.14 views

Festo Didactic SE MES PC

GENERAL RECOMMENDATION Festo Didactic offers products with security functions that aid the safe operation of plants, systems, machines and networks. In order to protect plants, systems, machines and networks from cyber threats, a comprehensive security concept must be implemented and...

7.9AI score
SaveExploits0References12
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.11 views

Microsoft Azure uAMQP Security Vulnerability

Microsoft Azure uAMQP is a library from Microsoft Corporation USA. A security vulnerability exists in versions of Microsoft Azure uAMQP prior to 2023-2-07, which stems from a double release issue that could lead to an RCE when incorrect AMQPVALUE failure states are processed...

9.8CVSS6.6AI score0.01418EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.10 views

Number withdrawn

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

8.3AI score
SaveExploits0References4
HackRead
HackRead
added 2024/02/22 6:20 p.m.18 views

AT&T Outage Disrupts Service for Millions of Users Across US

By Waqas You are not alone, an AT&T outage is happening across the United States, and the company is working… This is a post from HackRead.com Read the original post: AT&T Outage Disrupts Service for Millions of Users Across US...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2024/02/22 12:00 a.m.44 views

Mattermost Cross-Site Request Forgery Vulnerability (CNVD-2024-09864)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a cross-site request forgery vulnerability that stems from the Jira plugin's inability to prevent logout CSRF, which can be exploited by an attacker to post a specially crafted...

3.5CVSS6.9AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/22 12:00 a.m.11 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that originates from NULL pointer dereferences...

5.5CVSS7.8AI score0.00242EPSS
SaveExploits0References9
Lenovo
Lenovo
added 2024/02/14 1:57 a.m.8 views

AMD GPU Memory Leak Advisory - Lenovo Support US

No description provided...

5.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.12 views

The vulnerability of the program-defined telecommunication stack FreeSWITCH, related to incorrect handling of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the program-defined telecommunication stack FreeSWITCH is related to incorrect handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a ClientHello DTLS message with an invalid CipherSuite this triggers ...

7.8CVSS6.8AI score0.01485EPSS
SaveExploits4References3Affected Software1
CNNVD
CNNVD
added 2024/02/13 12:00 a.m.11 views

ISC BIND Security Vulnerability

ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in ISC BIND that stems from a specific recursive query pattern that may result in out of memory...

7.5CVSS8.3AI score0.01106EPSS
SaveExploits0References4
ICS
ICS
added 2024/02/06 7:00 a.m.62 views

HID Global Encoders

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable locally Vendor : HID Global Equipment : iCLASS SE, OMNIKEY Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration...

7.8CVSS6.8AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added 2024/02/06 1:15 a.m.14 views

CVE-2023-6231

Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and...

9.8CVSS7.5AI score0.01383EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/06 1:15 a.m.17 views

CVE-2023-6232

Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C...

9.8CVSS6.1AI score0.01457EPSS
SaveExploits0References4
Rows per page
Query Builder