Core FTP 缓冲区错误漏洞

Core FTP is a file transfer server. Core FTP / SFTP Server v2 Build 725 suffers from a buffer error vulnerability that could allow an unauthenticated attacker to cause a denial of service DoS via a SSH service via a crafted packet...

mruby 缓冲区错误漏洞

mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...

Wasmtime 缓冲区错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. Wasmtime suffers from a buffer error vulnerability that stems from a bug in Wasmtime's pooled instance allocator, where failure to instantiate an instance for a module that defines an...

Mozilla Thunderbird 缓冲区错误漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The software supports the IMAP and POP email protocols as well as the HTML email format. Mozilla Thunderbird suffers from a buffer error vulnerability that...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security signature issue vulnerability that can be exploited by attackers to bypass security restrictions...

Artifex Software Artifex MuJS 缓冲区错误漏洞

Artifex Software Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, Inc. that is used to provide script execution capabilities when embedded in other software. A buffer error vulnerability exists in Artifex Mujs due to a heap buffer overflow caused by JumpList in the...

Android Automotive OS 缓冲区错误漏洞

Google Android Automotive Os is an operating system and platform from Google, Inc. that runs directly on in-vehicle hardware. Android Automotive OS suffers from a buffer error vulnerability that originates in startVideoStream, which may perform an OOB read in the heap when the size of the camera...

Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞

The Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. A buffer error vulnerability exists in the Schneider Electric Interactive Graphical SCADA...

Schneider Electric 多款产品缓冲区错误漏洞

Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 are both products of Schneider Electric, a French company. Schneider Electric Modicon M340 is a medium-range PLC programmable logic controller for industrial processes and infrastructure. Send a specially crafted HTTP request ...

TP-LINK AC1750 缓冲区错误漏洞

The TP-LINK AC1750 is a wireless router from China P&L TP-LINK. A buffer error vulnerability exists in the TP-LINK AC1750 prior to version 211210, which stems from a lack of proper validation of user-supplied data, which could result in reading beyond the end of an allocated buffer. An attacker...

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader has a security vulnerability that can be exploited by attackers to execute code in the context of the current process...

Intel Trace Analyzer And Collector 缓冲区错误漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...

Siemens Simcenter Femap 缓冲区错误漏洞

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. It is used to create, edit and import/reuse mesh-based finite element analysis models of complex products or systems. Siemens Simcenter Femap is vulnerable to file parsing, which can be exploited b...

Interactive Graphical SCADA System Data Server 缓冲区错误漏洞

The Schneider Electric Interactive Graphical Scada System is a Scada system for monitoring industrial processes from Schneider Electric, France. An out-of-bounds read vulnerability exists in the Schneider Electric Interactive Graphical Scada System, which can be exploited by an attacker to cause ...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A buffer error vulnerability exists in the kvms390guestsidaop of the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel, which could be exploited by a local...

Intel Trace Analyzer And Collector 缓冲区错误漏洞

Intel Trace Analyzer And Collector is a trace analyzer and collector from Intel USA. It is used to analyze Mpi behavior in parallel applications. Intel Trace Analyzer and Collector suffers from a buffer error vulnerability that stems from a potential security flaw in Intel Trace Analyzer and...

Intel Kernelflinger 缓冲区错误漏洞

Intel Kernelflinger is an Intel Uefi bootloader for Android /Brillo from Intel Corporation USA. A buffer error vulnerability exists in the Intel Kernelflinger open source project, which stems from a potential security hole in the Kernelflinger open source project maintained by Intel. An attacker...

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in htmldoc, which originates from a stack out-of-bounds read/write occurring in gif get code, which can be exploited by an attacker to cause a...

Intel Processors BIOS firmware 缓冲区错误漏洞

Intel Processors are American Intel Corporation's offerings that interpret computer instructions and process data in computer software. The Intel Processors BIOS firmware suffers from a buffer error vulnerability that stems from a potential security flaw in the BIOS firmware of Intel Processors. ...

Microsoft Windows Runtime 缓冲区错误漏洞

Microsoft Windows Runtime .net framework is a necessary feature support library for the Windows operating system from Microsoft USA.Microsoft Windows Runtime has a remote code execution vulnerability for which no details of the vulnerability are currently available...