Lucene search
+L

3420 matches found

CNNVD
CNNVD
added 2023/01/03 12:0 a.m.9 views

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a mishandling in the Wi-Fi driver that could result in undefined behavior, which could lead to a local privilege escalation that requir...

6.7CVSS7AI score0.00256EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/01/03 12:0 a.m.12 views

CVE-2022-32658

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705059; Issue ID: GN20220705059...

6.7AI score0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/03 12:0 a.m.38 views

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

7AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/03 12:0 a.m.9 views

MediaTek 输入验证错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a mishandling in the Wi-Fi driver that could result in undefined behavior, which could lead to a local privilege escalation that requir...

6.7CVSS7AI score0.00256EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/01/03 12:0 a.m.32 views

CVE-2022-32657

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...

7AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.7 views

PT-2023-14361 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is available via the...

6.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.9 views

PT-2023-14341 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The record for this issue has been rejected due to non-compliance with CNA rules, as it has not been used. The information is from the National...

6.3AI score
SaveExploits0References2
OSV
OSV
added 2022/12/30 5:48 p.m.17 views

GHSA-GFGM-CHR3-X6PX prettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behavior

In function Table::asref, a reference of vector is force cast to slice. There are multiple problems here: 1. To guarantee the size is correct, we have to first do Vec::shrinktofit. The function requires a mutable reference, so we have to force cast from immutable to mutable, which is undefined...

7.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/12/30 5:48 p.m.24 views

prettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behavior

In function Table::asref, a reference of vector is force cast to slice. There are multiple problems here: 1. To guarantee the size is correct, we have to first do Vec::shrinktofit. The function requires a mutable reference, so we have to force cast from immutable to mutable, which is undefined...

1.7AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.7 views

PT-2022-9300 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

6.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.7 views

PT-2022-8632 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability, but rather indicates that a candidate number is unused and should not be used. There is no...

6.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.5 views

PT-2022-15278 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that has been reject...

6.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.7 views

PT-2022-9305 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as general information, estimated number of potentially affected devices...

6.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.10 views

PT-2022-9302 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

6.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.8 views

PT-2022-8623 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

6.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.6 views

PT-2022-22287 · Nvidia +1 · Nvidia Gpu Display Driver For Linux +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to a helper function in the kernel mode layer handler that maps more physical pages than requested, potentially leading to undefined behavio...

7.8CVSS5.6AI score0.00286EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
added 2022/12/28 12:0 a.m.42 views

EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2022-2923)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 - Use After Free in GitHub repository vim/vim prior to...

7.8CVSS6.4AI score0.01351EPSS
SaveExploits10References11
Tenable Nessus
Tenable Nessus
added 2022/12/28 12:0 a.m.39 views

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-2949)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 - Use After Free in GitHub repository vim/vim prior to...

7.8CVSS6.4AI score0.01351EPSS
SaveExploits10References11
FreeBSD
FreeBSD
added 2022/12/24 12:0 a.m.33 views

freerdp -- multiple vulnerabilities

FreeRDP reports: GHSA-5w4j-mrrh-jjrm: Out of bound read in zgfx decoder. GHSA-99cm-4gw7-c8jh: Undefined behaviour in zgfx decoder. GHSA-387j-8j96-7q35: Division by zero in urbdrc channel. GHSA-mvxm-wfj2-5fvh: Missing length validation in urbdrc channel. GHSA-qfq2-82qr-7f4j: Heap buffer overflow i...

5.7CVSS6.2AI score0.00967EPSS
SaveExploits0References7
OSV
OSV
added 2022/12/20 9:15 p.m.8 views

CVE-2022-46311

The contacts component has a free undefined provider vulnerability. Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS5.8AI score0.00342EPSS
SaveExploits0References1
Rows per page
Query Builder