Lucene search
+L

2876 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•5 views

CVE-2021-43030: Access of Uninitialized Pointer

Adobe Premiere Rush versions 1.5.16 and earlier allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

4.3CVSS7.2AI score0.01309EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•8 views

CVE-2021-38409: Access of Uninitialized Pointer

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service...

7.8CVSS5.8AI score0.00688EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•4 views

CVE-2021-43746: Access of Uninitialized Pointer

Adobe Premiere Rush versions 1.5.16 and earlier allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

5.5CVSS7AI score0.01718EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/12/16 12:00 a.m.•18 views

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, stems from the use of an uninitialized pointer. This allows a intruder to trigger a service failure.

The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a hacker to cause a service failure...

7.8CVSS7.2AI score0.00688EPSS
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
•added 2021/12/14 12:00 a.m.•36 views

Tencent WeChat WXAM Decoder Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. T...

8.8CVSS4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/12/03 12:00 a.m.•21 views

OpenText Brava! Desktop pdf2dl Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.7AI score
SaveExploits0
ICS
ICS
•added 2021/11/09 12:00 a.m.•58 views

Siemens NX OBJ Translator

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: low attack complexity Vendor: Siemens Equipment: NX Vulnerabilities: Use After Free, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to an access violation and arbitrary code execution on...

7.8CVSS7.1AI score0.01567EPSS
SaveExploits0References11
ICS
ICS
•added 2021/11/09 12:00 a.m.•46 views

Siemens NX JT Translator

1. EXECUTIVE SUMMARY CVSS v3 3.3 ATTENTION: Low attack complexity Vendor: Siemens Equipment: NX Vulnerabilities: Out-of-bounds Read, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to access violation and arbitrary code execution on...

4.3CVSS5.4AI score0.00966EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•5 views

CVE-2021-41201: Access of Uninitialized Pointer

TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•3 views

CVE-2021-41214: Access of Uninitialized Pointer

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for tf.ragged.cross has an undefined behavior due to binding a reference to nullptr. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

7.8CVSS5.7AI score0.00217EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•2 views

PT-2021-30950

Уязвимость функции extract dirs from files подсистемы безопасности PARSEC связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...

4.7CVSS5.8AI score
SaveExploits0References3
OSV
OSV
•added 2021/10/26 10:15 a.m.•20 views

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

6.5CVSS5.8AI score0.00855EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/26 10:15 a.m.•27 views

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

6.5CVSS0.00855EPSS
SaveExploits0References1
Prion
Prion
•added 2021/10/26 10:15 a.m.•26 views

Race condition

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

4CVSS6.2AI score0.00855EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2021/10/26 9:55 a.m.•33 views

CVE-2021-34596 CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

6.5CVSS6.4AI score0.00855EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/26 12:00 a.m.•9 views

CVE-2021-34596: Access of Uninitialized Pointer

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

6.5CVSS5.6AI score0.00855EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/26 12:00 a.m.•19 views

Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric V-Server Lite is a remote monitoring software for industrial environments from Fuji Electric Japan. The software collects information from PLCs, temperature controllers, inverters, and other devices. A buffer error vulnerability exists in Fuji Electric Tellus Lite V-Simulator and...

7.8CVSS7.4AI score0.00753EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/10/26 12:00 a.m.•5 views

PT-2021-5237

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server Lite and Tellus Lite V-Simulator versions prior to 4.0.12.0 Description The issue is related to the use of an uninitialized pointer, which may allow an attacker to read from or write to unexpected memory locations. This...

7.8CVSS0.00688EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/10/26 12:00 a.m.•18 views

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions A buffer error vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted request that could result in a denial-of-service condition due t...

6.5CVSS6.7AI score0.00855EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/26 12:00 a.m.•16 views

PT-2021-20571 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request may cause a read access to an uninitialized pointer, resulting in a denial-of-service condition...

6.5CVSS7AI score0.00855EPSS
SaveExploits0References4
Rows per page
Query Builder