CVE-2024-37990

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT 6GT2811-6BC10-2AA0 All versions V4.2, SIMATIC Reader RF610R ETSI 6GT2811-6BC10-0AA0 All versions V4.2, SIMATIC Reader RF610R FCC 6GT2811-6BC10-1AA0 All versions V4.2, SIMATIC Reader RF615R CMIIT 6GT2811-6CC10-2AA0 All versions V4....

CVE-2023-7066

CVE-2023-7066 is associated with an out-of-bounds read while parsing specially crafted PDF data. Connected documents identify the APDFL library as affected (with no specific affected versions or fix details provided), and reiterate that exploitation could allow code execution in the attacker’s co...

CVE-2024-0741

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

PT-2022-15772 · Western Digital +1 · Sweet B Library +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when computing a shared secret or point multiplication on the NIST P-256 curve, resulting in an X coordinate of zero. The output is not...

Google Android System Component Remote Code Execution Vulnerability (CNVD-2018-06646)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the Google Android System component. An attacker can exploit the vulnerability to execute arbitrary code in the context of an...

Apache Log4j Remote Code Execution Vulnerability

Apache Log4j is currently in J2EE and J2SE development in the most used logging framework. A remote code execution vulnerability exists in Apache Log4j. The vulnerability allows an attacker to execute arbitrary code in the context of an affected application...

ImageWorsener 'iwbmp_read_info_header()' function denial of service vulnerability

ImageWorsener is a cross-platform command line utility and library for image scaling and other image processing. It has full support for PNG, JPEG, and BMP formats, experimental support for WebP, read-only support for GIF, and limited support for some other image formats. A denial of service...

Pivotal GemFire for PCF Unauthorized Access Vulnerability

GemFire for PCF is a distributed management platform designed by Pivotal for many different data management situations, but is particularly useful for high-volume, latency-sensitive, mission-critical transactional systems. An unauthorized access vulnerability exists in Pivotal GemFire for PCF. An...

libjpeg-turbo out-of-bounds read remote code execution vulnerability

libjpeg is a C library maintained by the Independent JPEG Group IJG that contains JPEG decoding, JPEG encoding, and other JPEG functions. libjpeg-turbo is a modified version of libjpeg optimized for x86 and x86-64 processors. A remote code execution vulnerability exists in libjpeg-turbo. An...

PHP 'unserialize()' function memory misreference vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A memory misreference vulnerability exists in the PHP 'unserialize' function. An attacker could exploit this vulnerability to execute arbitrary...

Apple iOS/macOS/tvOS/watchOS Buffer Overflow Vulnerability

Apple iOS is the operating system of Apple Inc. Apple iOS is developed for mobile devices; macOS is developed for Mac computers. A buffer overflow vulnerability exists in Apple iOS/macOS/tvOS and watchOS. An attacker could exploit this vulnerability to execute arbitrary code in the context of an...

WebKit memory corruption vulnerability (CNVD-2016-11914)

WebKit is KDE, Apple Apple, Google Google and other companies to develop a set of open source Web browser engine , currently used by Apple Safari and Google Chrome and other browsers . A memory corruption vulnerability exists in WebKit. An attacker can exploit this vulnerability to execute...

IPython ipywidgets Remote Code Execution Vulnerability

IPython ipywidgets is an HTML control for Jupyter Notebook to interact with the IPython kernel. A remote code execution vulnerability exists in ipywidgets that can be exploited by an attacker to execute arbitrary code in the context of an affected application...

PHP 'bzdecompress()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'bzdecompress' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result in a...

WordPress Cross-Site Request Forgery Vulnerability (CNVD-2016-06640)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to...

Cross-Site Request Forgery Vulnerability in Multiple IBM Products

IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switches are both products of IBM USA. The former is an Ethernet adapter product; the latter is a switch product. A cross-site request forgery vulnerability exists in multiple IBM products. An attacker is allowed to exploit this...

Amazon App Store Remote Code Execution Vulnerability

The Amazon App Store is a set of application stores from Amazon.com, Inc. in the United States. A remote code execution vulnerability exists in Amazon App Store. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...

GNU glibc 'getaddrinfo.c' Remote Code Execution Vulnerability

GNU glibc is an implementation of the C library for the Linux operating system. A remote code execution vulnerability exists in GNU glibc 'getaddrinfo.c', which can be exploited by an attacker to execute arbitrary code in an affected application...

FancyFon FAMOC Session Fixation Vulnerability

FancyFon FAMOC is a mobile device management platform. FancyFon FAMOC suffers from a session fixation vulnerability that can be exploited by an attacker to hijack arbitrary sessions and gain unauthorized access in affected applications...

WebKit memory corruption vulnerability (CNVD-2015-00748)

WebKit is an open source browser engine and the name of Apple's version of the Mac OS X system engine framework. WebKit suffers from a memory corruption vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...