Lucene search
+L

2918 matches found

Fortinet
Fortinet
•added 2022/04/05 12:00 a.m.•60 views

FortiWLC - Access of Uninitialized Pointer vulnerability

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

5AI score0.00161EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/01 12:00 a.m.•6 views

PT-2022-37901

Уязвимость функции ocfs2 unlock global qf модуля fs/ocfs2/quota global.c файловой системы OCFS2 ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

7.8CVSS5.8AI score0.00281EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2022/03/31 12:00 a.m.•13 views

Linux netfilter nf_tables Unauthorized Access

The vulnerability of the nftables module of the netfilter subsystem in Linux operating systems is related to the use of an uninitialized pointer nftdochain. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00434EPSS
SaveExploits2References19Affected Software8
ICS
ICS
•added 2022/03/31 12:00 a.m.•62 views

Fuji Electric Alpha5

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Alpha5 Vulnerabilities: Access of Uninitialized Pointer, Out-of-bound Read, Stack-based Buffer Overflow, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these...

7.8CVSS6.9AI score0.0118EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2022/03/29 6:15 p.m.•10 views

DEBIAN-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.9AI score0.01104EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2022/03/29 6:15 p.m.•12 views

ALPINE-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.6AI score0.01104EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/03/29 6:15 p.m.•16 views

UBUNTU-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.9AI score0.01104EPSS
SaveExploits0References3
Mend
Mend
•added 2022/03/29 5:25 p.m.•2 views

CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

6.8CVSS0.01104EPSS
SaveExploits0References18
Debian CVE
Debian CVE
•added 2022/03/29 5:25 p.m.•64 views

CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS7.1AI score0.01104EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•9 views

OpenJPEG 安全漏洞

OpenJPEG is an open source C-based JPEG2000 codec. A security vulnerability exists in OpenJPEG version 2.4.0, which stems from the opj2decompress program when it fails to allocate a buffer to store the filename of an input directory, it calls free on the uninitialized pointer, which results in a...

5.5CVSS7.2AI score0.01104EPSS
SaveExploits0References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/29 12:00 a.m.•7 views

CVE-2022-1122: Improper Initialization

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.7AI score0.01104EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•3 views

PT-2025-8128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel oops issue has been identified in the Linux kernel, specifically in the btmtksdio interrupt function. This issue occurs because the hdev-power on function is called before sdio...

5.5CVSS5.6AI score0.00269EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2022/03/09 12:00 a.m.•49 views

Microsoft Windows CD-ROM Driver Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CD-ROM drive...

7.8CVSS7.8AI score0.00925EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2022/03/05 8:00 a.m.•8 views

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.

...

6CVSS7.2AI score0.00363EPSS
SaveExploits0
Mend
Mend
•added 2022/02/24 6:50 p.m.•7 views

CVE-2021-3608

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The...

8.1CVSS0.00363EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•6 views

CVE-2021-3608: Access of Uninitialized Pointer

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The...

6CVSS6.1AI score0.00363EPSS
SaveExploits0References3
NVD
NVD
•added 2022/02/16 10:15 p.m.•51 views

CVE-2022-23636

Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an invalid drop of a...

8.1CVSS0.00772EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/16 12:00 a.m.•4 views

PT-2022-16149

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 0.34.1 and 0.33.1 Description A bug exists in the pooling instance allocator in Wasmtime's runtime. When a failure to instantiate an instance for a module that defines an externref global occurs, it results in an...

8.1CVSS0.00772EPSS
SaveExploits1References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/16 12:00 a.m.•8 views

CVE-2022-23636: Access of Uninitialized Pointer

Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an invalid drop of a...

8.1CVSS7AI score0.00772EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2022/02/11 12:00 a.m.•47 views

Siemens Simcenter Femap NEU File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.6AI score0.01596EPSS
SaveExploits0References1
Rows per page
Query Builder