CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

2.328 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2022-20701 Alta · 7.8 KEV Alta · 58 CWE-787 10/02/2022
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2022-0529 Média · 5.5 CWE-787 09/02/2022
A flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to...
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
CVE-2022-21882 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware CWE-787 11/01/2022
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2021-45949 Média · 5.5 CWE-787 31/12/2021
Out-of-bounds Write em Artifex Ghostscript
Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).
CVE-2021-43975 Média · 6.7 CWE-787 17/11/2021
Out-of-bounds Write em Linux Linux Kernel
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.
CVE-2021-30807 Alta · 7.8 KEV Alta · 62 Exploit público CWE-787 19/10/2021
Apple Multiple Products Memory Corruption Vulnerability
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
CVE-2021-30632 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 08/10/2021
Google Chromium V8 Out-of-Bounds Write Vulnerability
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-39537 Alta · 8.8 CWE-787 20/09/2021
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based...
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVE-2021-38406 Alta · 7.8 KEV Alta · 56 CWE-787 17/09/2021
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVE-2021-30665 Alta · 8.8 KEV Alta · 54 CWE-787 08/09/2021
Apple Multiple Products WebKit Memory Corruption Vulnerability
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVE-2021-30761 Alta · 8.8 KEV Alta · 55 CWE-787 08/09/2021
Apple iOS WebKit Memory Corruption Vulnerability
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVE-2021-30900 Alta · 7.8 KEV Alta · 55 CWE-787 24/08/2021
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.
CVE-2021-30883 Alta · 7.8 KEV Alta · 56 CWE-787 24/08/2021
Apple Multiple Products Memory Corruption Vulnerability
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
CVE-2021-34448 Média · 6.8 KEV Alta · 56 CWE-787 16/07/2021
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
CVE-2021-35211 Crítica · 10.0 KEV Urgente · 80 Exploit público Ransomware CWE-787 14/07/2021
SolarWinds Serv-U Remote Code Execution Vulnerability
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.
CVE-2021-22555 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-787 07/07/2021
Escrita fora dos limites em heap no kernel Linux (x_tables)
Uma escrita fora dos limites em heap afetando o Linux desde v2.6.19-rc1 foi descoberta em net/netfilter/x_tables.c. Isso permite que um atacante obtenha privilégios ou cause um DoS (por meio de corrupção de memória heap) através de user name space
CVE-2020-12358 Média · 4.4 CWE-787 09/06/2021
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to...
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVE-2020-11261 Alta · 7.8 KEV Alta · 52 CWE-787 09/06/2021
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-33742 Alta · 7.5 KEV Alta · 56 CWE-787 08/06/2021
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-27562 Média · 5.5 KEV Alta · 51 CWE-787 25/05/2021
Arm Trusted Firmware Out-of-Bounds Write Vulnerability
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.
CVE-2021-3517 Alta · 8.6 CWE-787 19/05/2021
Nokogiri contains libxml Out-of-bounds Write vulnerability
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.
CVE-2021-28664 Alta · 8.8 KEV Alta · 61 Exploit público CWE-787 10/05/2021
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.
CVE-2021-31755 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-787 07/05/2021
Tenda AC11 Router Stack Buffer Overflow Vulnerability
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.
CVE-2021-21220 Alta · 8.8 KEV Urgente · 74 Exploit público CWE-787 26/04/2021
Google Chromium V8 Improper Input Validation Vulnerability
Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-28310 Alta · 7.8 KEV Alta · 61 Exploit público CWE-787 13/04/2021
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability