Lucene search
+L

7009 matches found

CVE
CVE
added 2021/11/17 7:03 p.m.64 views

CVE-2021-33071

Intel oneAPI Rendering Toolkit before version 2021.2 contains a flaw due to incorrect default installer permissions, which may allow an authenticated local user to escalate privileges. Affected product: Intel® oneAPI Rendering Toolkit. Root cause: installer permissions misconfiguration. Impact: l...

7.8CVSS7.8AI score0.00208EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/17 7:02 p.m.36 views

CVE-2021-33097

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

6.9AI score0.00549EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/17 7:02 p.m.51 views

CVE-2021-33097

CVE-2021-33097 affects the Crypto API Toolkit for Intel(R) SGX. It is a Time-of-check Time-of-use vulnerability that may allow a privileged user to escalate privileges via network access. The issue is documented across multiple sources, including Intel’s advisory and NVD, and specifically impacts...

6.6CVSS6.7AI score0.00549EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.10 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe XMP-Toolkit-SDK software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.03812EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/16 12:00 a.m.13 views

The vulnerability of the software for creating metadata, processing, and exchanging Adobe XMP-Toolkit-SDK standard sets, related to reading beyond the buffer in memory, allows a perpetrator to cause service failures.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a speciall...

4.3CVSS6.6AI score0.01964EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/16 12:00 a.m.13 views

The vulnerability of the software for creating metadata, processing, and exchanging sets of Adobe XMP-Toolkit-SDK standards is related to buffer overflows in dynamic memory. This vulnerability allows attackers to cause system failures.

The vulnerability of the software for creating, processing, and exchanging metadata using the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.1CVSS6.8AI score0.04378EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:00 a.m.20 views

The vulnerability of the software for creating metadata, processing, and exchanging sets of Adobe XMP-Toolkit-SDK standards lies in buffer overflows in dynamic memory. This allows attackers to gain access to protected information or cause service failures.

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

3.3CVSS6.7AI score0.03751EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:00 a.m.22 views

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK lies in the insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

7.8CVSS7.6AI score0.02716EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/11/14 9:15 p.m.7 views

CVE-2021-43279

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

7.8CVSS5.6AI score0.01293EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/11 12:00 a.m.12 views

Cloudflare OctoRPKI 路径遍历漏洞

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from cloudflare USA. Cloudflare OctoRPKI suffers from a path traversal vulnerability that could allow an attacker to remotely execute code on the host...

9.8CVSS8.5AI score0.04065EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.15 views

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflows in the “bag” component. This allows attackers to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to buffer overflows in the “bucket” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

7.8CVSS7.9AI score0.05811EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.14 views

Intel oneAPI Rendering Toolkit 安全漏洞

Intel OneApi Rendering Toolkits is a rendering toolkit from Intel Corporation, USA. Accelerates these types of workloads with a set of rendering and ray tracing libraries to create high-performance, high-fidelity visual experiences. A security vulnerability exists in Intel oneAPI Rendering Toolki...

7.8CVSS7.4AI score0.00208EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.13 views

Intel Crypto Api Toolkit 安全漏洞

Intel Crypto Api Toolkit is a cryptographic Api toolkit from Intel Corporation USA. The interface for securely running key generation and encryption operations enhances the security of data and key protection applications. A security vulnerability exists in Intel Crypto Api Toolkit that stems fro...

6.6CVSS6.6AI score0.00549EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.13 views

Intel Distribution of OpenVINO(TM) Toolkit 资源管理错误漏洞

The Intel Distribution of OpenVINOTM Toolkit is an application and solution for developing applications and solutions that use deep learning intelligence from Intel USA. The toolkit is based on Convolutional Neural Networks CNNs and scales workloads across Intel® hardware, including gas pedals, a...

5.5CVSS5.8AI score0.00218EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.10 views

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflows in the “bag” component. This allows attackers to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to buffer overflows in the “bucket” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

7.8CVSS7.9AI score0.05399EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.9 views

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards, related to reading beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

7.1CVSS6.6AI score0.01936EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.12 views

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current use...

9.3CVSS7.6AI score0.02716EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.11 views

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflow errors in dynamic memory. This vulnerability allows attackers to cause system failures.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.1CVSS7.5AI score0.02756EPSS
SaveExploits0References2Affected Software1
AlmaLinux
AlmaLinux
added 2021/11/09 9:21 a.m.56 views

Moderate: openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: integer overflow in CipherUpdate CVE-2021-23840 openssl: NULL pointer dereference in...

5CVSS7.5AI score0.50732EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/09 8:31 a.m.35 views

ALSA-2021:4172 Moderate: qt5 security, bug fix, and enhancement update

Qt is a software toolkit for developing applications. The following packages have been upgraded to a later upstream version: adwaita-qt 1.2.1, python-qt5 5.15.0, qgnomeplatform 0.7.1, qt5 5.15.2, qt5-qt3d 5.15.2, qt5-qtbase 5.15.2, qt5-qtconnectivity 5.15.2, qt5-qtdeclarative 5.15.2, qt5-qtdoc...

7.1CVSS7.1AI score0.00543EPSS
SaveExploits1References2
Rows per page
Query Builder