Lucene search
+L

2207 matches found

CNNVD
CNNVD
added 2022/04/14 12:00 a.m.29 views

Juniper Networks Junos OS 缓冲区错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS SIP ALG, which is caused by an uninitialized pointer access...

7.5CVSS7.4AI score0.00905EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/13 7:00 a.m.13 views

CVE-2022-22198

An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Continued receipt of these specific packets will cause a sustained Denial of Service condition. On all MX and SRX...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits0References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2022/04/12 12:00 a.m.30 views

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-16: CVE-2022-27794)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

9.3CVSS6.3AI score0.14665EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2022/04/12 12:00 a.m.187 views

KLA12501 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of...

9.3CVSS9.4AI score0.18297EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/04/07 12:00 a.m.13 views

PT-2022-3357 · V-Sft · V-Sft

Name of the Vulnerable Software and Affected Versions: V-SFT versions prior to v6.1.6.0 Description: The issue is related to the use of an uninitialized pointer in the simulator module of the V-SFT graphic editor. This could allow an attacker to gain unauthorized access to protected information o...

7.8CVSS7.8AI score0.00753EPSS
SaveExploits0References5
Fortinet
Fortinet
added 2022/04/05 12:00 a.m.47 views

FortiWLC - Access of Uninitialized Pointer vulnerability

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

5AI score0.0016EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/31 12:00 a.m.10 views

The vulnerability of the nf_tables module of the netfilter subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the nftables module of the netfilter subsystem in Linux operating systems is related to the use of an uninitialized pointer nftdochain. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00424EPSS
SaveExploits2References19Affected Software8
ICS
ICS
added 2022/03/31 12:00 a.m.52 views

Fuji Electric Alpha5

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Alpha5 Vulnerabilities: Access of Uninitialized Pointer, Out-of-bound Read, Stack-based Buffer Overflow, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these...

7.8CVSS6.9AI score0.01105EPSS
SaveExploits0References5
OSV
OSV
added 2022/03/29 6:15 p.m.6 views

ALPINE-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.6AI score0.01104EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/29 6:15 p.m.6 views

DEBIAN-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.9AI score0.01104EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/29 6:15 p.m.6 views

UBUNTU-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS6.9AI score0.01104EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/03/29 5:25 p.m.58 views

CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

5.5CVSS7.1AI score0.01104EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/03/29 12:00 a.m.6 views

OpenJPEG 安全漏洞

OpenJPEG is an open source C-based JPEG2000 codec. A security vulnerability exists in OpenJPEG version 2.4.0, which stems from the opj2decompress program when it fails to allocate a buffer to store the filename of an input directory, it calls free on the uninitialized pointer, which results in a...

5.5CVSS7.2AI score0.01104EPSS
SaveExploits0References21
Zero Day Initiative
Zero Day Initiative
added 2022/03/09 12:00 a.m.43 views

Microsoft Windows CD-ROM Driver Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CD-ROM drive...

7.8CVSS7.8AI score0.00925EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2022/03/05 8:00 a.m.4 views

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.

...

6CVSS7.2AI score0.00363EPSS
SaveExploits0
NVD
NVD
added 2022/02/16 10:15 p.m.41 views

CVE-2022-23636

Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an externref global will result in an invalid drop of a...

8.1CVSS0.00772EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:00 a.m.39 views

Siemens Simcenter Femap NEU File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.6AI score0.01596EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/09 11:38 p.m.13 views

GHSA-H6GW-R52C-724R NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow

Impact The code for boosted trees in TensorFlow is still missing validation. This allows malicious users to read and write outside of bounds of heap allocated data as well as trigger denial of service via dereferencing nullptrs or via CHECK-failures. This follows after CVE-2021-41208 where these...

9.3CVSS7AI score
SaveExploits0References4
OSV
OSV
added 2022/02/09 11:15 p.m.8 views

CVE-2022-21156

Access of uninitialized pointer in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS6.1AI score0.00227EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/02/09 10:04 p.m.12 views

CVE-2022-21156

Access of uninitialized pointer in the IntelR Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access...

5.3AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder