Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2023-25738
Média · 6.5
CWE-125 02/06/2023
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
CVE-2023-30985
Média · 5.5
CWE-125 09/05/2023
A vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3),...
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)
CVE-2021-31239
Alta · 7.5
CWE-125 08/05/2023
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of...
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.
CVE-2023-29053
Alta · 7.8
CWE-125 11/04/2023
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All...
A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-27401
Alta · 7.8
CWE-125 14/03/2023
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20308, ZDI-CAN-20345)
CVE-2023-27405
Alta · 7.8
CWE-125 14/03/2023
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20432)
CVE-2023-27402
Alta · 7.8
CWE-125 14/03/2023
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20334)
CVE-2023-27371
Média · 5.9
CWE-125 28/02/2023
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of...
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
CVE-2023-26607
Alta · 7.1
CWE-125 26/02/2023
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
CVE-2023-22231
Média · 5.5
CWE-125 17/02/2023
Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-25140
Alta · 7.8
CWE-125 14/02/2023
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34...
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-24558
Alta · 7.8
CWE-125 14/02/2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-24557
Alta · 7.8
CWE-125 14/02/2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-24554
Alta · 7.8
CWE-125 14/02/2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-24556
Alta · 7.8
CWE-125 14/02/2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-24552
Alta · 7.8
CWE-125 14/02/2023
A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...
A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.
CVE-2023-0698
Alta · 8.8
CWE-125 07/02/2023
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to...
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2022-48303
Média · 5.5
CWE-125 30/01/2023
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized...
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.
CVE-2022-47520
Alta · 7.1
CWE-125 18/12/2022
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers...
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.
CVE-2022-2905
Média · 5.5
CWE-125 09/09/2022
Out-of-bounds Read em Linux Linux Kernel
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
CVE-2021-3998
Alta · 7.5
CWE-125 24/08/2022
A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...
A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
CVE-2022-2287
Alta · 7.1
CWE-125 02/07/2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2286
Alta · 7.8
CWE-125 02/07/2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2257
Alta · 7.8
CWE-125 30/06/2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2206
Alta · 7.8
CWE-125 26/06/2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.