Threat database

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Adobe Substance 3D Designer contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is rated medium severity with a CVSS score of 5.5.

Adobe Substance 3D Designer contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5. No patch or remediation information is currently provided.

Adobe Substance 3D Designer contains a stack-based buffer overflow vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability does not impact confidentiality or integrity but affects availability.

Adobe Substance 3D Designer contains a NULL Pointer Dereference vulnerability (CWE-476) that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Adobe Substance 3D Designer contains a NULL Pointer Dereference vulnerability (CWE-476) that can cause the application to crash and result in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Adobe Substance 3D Designer contains a stack-based buffer overflow vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. No data confidentiality or integrity impact is indicated. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Adobe Substance 3D Designer contains a NULL Pointer Dereference vulnerability that can cause the application to crash, resulting in denial-of-service. Exploitation requires a user to open a specially crafted malicious file. The vulnerability does not impact confidentiality or integrity but affects availability.