Lucene search
+L

455 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/20 12:00 a.m.•7 views

CVE-2022-40246: Write-what-where Condition

A potential attacker can write one byte by arbitrary address at the time of the PEI phase only during S3 resume boot mode and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines V...

7.2CVSS7.3AI score0.0049EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/08/30 12:00 a.m.•22 views

Fuji Electric D300win 缓冲区错误漏洞

The Fuji Electric D300win is a PLC product and solution from Fuji Electric Japan. A security vulnerability exists in the Fuji Electric D300win that stems from vulnerability to a write-what-where condition, which can be exploited by an attacker to overwrite program memory in order to manipulate th...

9.1CVSS6.8AI score0.00523EPSS
SaveExploits0References4
ICS
ICS
•added 2022/08/30 12:00 a.m.•51 views

Fuji Electric D300win

1. EXECUTIVE SUMMARY CVSS v3 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Fuji Electric Equipment: D300win Vulnerabilities: Out-of-bounds Read, Write-what-where Condition 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in loss of sensitive...

9.1CVSS7.9AI score0.00583EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/06/29 12:00 a.m.•41 views

Debian DLA-3060-1 : blender - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3060 advisory. Several issues have been found in blender, a very fast and versatile 3D modeller/renderer. CVE-2022-0546 An out-of-bounds heap access due to missing checks in the...

7.8CVSS6.8AI score0.01174EPSS
SaveExploits0References9
OSV
OSV
•added 2022/05/05 5:15 p.m.•19 views

DEBIAN-CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS8.8AI score0.02146EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/05 5:15 p.m.•28 views

CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS0.02146EPSS
SaveExploits0References2
OSV
OSV
•added 2022/05/05 5:15 p.m.•22 views

UBUNTU-CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS5.9AI score0.02146EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/05/05 5:15 p.m.•31 views

CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS7.2AI score0.02146EPSS
SaveExploits0References3
Prion
Prion
•added 2022/05/05 5:15 p.m.•30 views

Design/Logic Flaw

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

7.5CVSS9.3AI score0.02146EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/05/05 3:15 p.m.•15 views

CVE-2021-38441 Eclipse CycloneDDS Write-what-where Condition

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

6.6CVSS6.8AI score0.02146EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/05/05 3:15 p.m.•36 views

CVE-2021-38441 Eclipse CycloneDDS Write-what-where Condition

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

6.6CVSS9.6AI score0.02146EPSS
SaveExploits0References2
Mend
Mend
•added 2022/05/05 3:15 p.m.•4 views

CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS0.02146EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•4 views

PT-2022-10727

Name of the Vulnerable Software and Affected Versions Eclipse CycloneDDS versions prior to 0.8.0 Description The issue is related to a write-what-where condition that may allow an attacker to write arbitrary values in the XML parser. This could potentially be exploited by an attacker...

9.8CVSS0.02146EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•8 views

CVE-2021-38441: Write-what-where Condition

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS8.2AI score0.02146EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2022/03/23 12:00 a.m.•37 views

Siemens syngo fastView BMP File Parsing Write-what-where Condition Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens syngo fastView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5AI score0.00323EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/16 3:15 p.m.•13 views

CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

9.8CVSS7.5AI score0.02436EPSS
SaveExploits1References4
Prion
Prion
•added 2022/03/16 3:15 p.m.•30 views

Double free

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

7.5CVSS9.5AI score0.02436EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/03/16 3:15 p.m.•20 views

UBUNTU-CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

9.8CVSS7.4AI score0.02436EPSS
SaveExploits1References5
CVE
CVE
•added 2022/03/16 2:12 p.m.•128 views

CVE-2021-23158

CVE-2021-23158 : In HTMLDOC v1.9.12, a double-free in pspdf_export() (ps-pdf.cxx) may cause a write-what-where condition, enabling arbitrary code execution and denial of service. Affected component: HTMLDOC PDF export path; root cause: memory management error (double-free). Impact: remote code ex...

9.8CVSS9.4AI score0.02436EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/02/24 7:15 p.m.•20 views

CVE-2022-0545

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is...

7.8CVSS7.6AI score0.01164EPSS
SaveExploits0References4
Rows per page
Query Builder