PT-2024-21356 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a segmentation violation in the function free lines at swftools/lib/modules/swfshape.c. This indicates a potential memory access error that could lead to unexpected program behavior ...

CVE-2021-47102 net: marvell: prestera: fix incorrect structure access

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure access In line: upper = info-upperdev; We access upperdev field, which is related only for particular events e.g. event == NETDEVCHANGEUPPER. So, this line cause invalid memory acce...

The vulnerability of the ff_hevc_put_hevc_qpel_h_2_v_1_sse() function in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the ffhevcputhevcqpelh2v1sse function in the h.265 Libde265 implementation is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure through the use of a specially...

AZL-34214 CVE-2024-0229 affecting package xorg-x11-server for versions less than 1.20.10-12

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...

kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval()

An out-of-bounds OOB memory access flaw was found in the Netfilter module in the Linux kernel's nftbyteordereval in net/netfilter/nftbyteorder.c. A bound check failure allows a local attacker with CAPNETADMIN access to cause a local privilege escalation issue due to incorrect data alignment...

PT-2023-9465 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the Linux kernel's sockmap component, where a hard-coded assumption in the call-chain expects the egress socket to be a TCP socket. However, with the...

USN-6371-1 libssh2 vulnerability

It was discovered that libssh2 incorrectly handled memory access. An attacker could possibly use this issue to cause a crash...

The vulnerability of the proxy server of the Windows operating system’s data streaming service allows attackers to enhance their privileges.

The vulnerability of the proxy server of the Windows operating system for data streaming services is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

UBUNTU-CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

Delivery Controller fails to connect to local SQL Express database

Migrating databases for existing site from a full SQL server to a SQL Express instance running in the same VM as one of the Delivery Controllers causes the controller hosting the SQL Express not to be able to connect to the database, even after the correct machine account permissions and login...

Design/Logic Flaw

An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. Specifically, for a request with updatepassword=1, a modified...

CVE-2023-27576

An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. Specifically, for a request with updatepassword=1, a modified...

CVE-2023-27576

An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. Specifically, for a request with updatepassword=1, a modified...

phplist 安全漏洞

phplist is a suite of open source newsletter and email marketing software from UK-based phplist. A security vulnerability exists in phplist version 3.6.12, which stems from the presence of an access error that allows manipulation and editing of the system super administrator's data, which could...

CVE-2023-27576

phpList before 3.6.14 contains an access validation flaw that lets an attacker manipulate the super admin’s data (by tampering updatepassword=1 requests and altering both the ID and username) to perform a password reset and take over the super admin account. The impact is account takeover with su...

PT-2023-35927 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

Wireshark 缓冲区错误漏洞

Wireshark is a free, open-source network protocol analyzer that helps users capture and analyze network packets.Wireshark can be used for a variety of purposes such as network troubleshooting, security auditing, etc. It is a very useful network tool. Wireshark has a security vulnerability. The...

The vulnerability of the Cisco Fabric Services component for NX-OS and Cisco FXOS operating systems in Cisco devices allows a attacker to trigger a service failure.

The vulnerability of the Cisco Fabric Services component for NX-OS and Cisco FXOS operating systems in Cisco devices is related to operations that occur outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2023-35794 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in the function PackLinuxElf32::elflookup in plxelf.cpp:5368 that causes the generic pointer p to point to an inaccessible address in func getle32...