8934 matches found
CVE-2024-47670
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2xattrfindentry Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case...
Linux Kernel Buffer Overflow Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of boundary checking when looking up xattr entries, which could lead to out-of-bounds access...
Security Bulletin: IBM Security Guardium is affected by a remote code execution vulnerability (CVE-2022-37434)
Summary IBM Security Guardium has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2022-37434 DESCRIPTION: zlib is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by inflate in inflate.c. By using a large gzip header extra field, a remote...
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
Summary IBM Security Guardium has addressed these vulnerabilities with an update. Vulnerability Details CVEID:CVE-2024-29857 DESCRIPTION: The Bouncy Castle Crypto Package For Java is vulnerable to a denial of service, caused by improper input validation. By importing an EC certificate with crafte...
Intel TDX Module firmware code-related vulnerabilities
Intel TDX Module firmware is a firmware from Intel Corporation USA. A code issue vulnerability exists in Intel TDX Module firmware version 1.5.06, which arises from improper exception or exception checking in the firmware and allows a privileged user to disclose information via local access...
Samsung Mobile Devices security vulnerabilities
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2024 Release 1 prior to Release 1, which stems from improper checking of anomalies b...
MAL-2024-11564 Malicious code in crypto-format-checking (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a95b535a5d579db23cf10d4a9897278238afb3093600235b1f39ddf2cca74600 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...
Malicious code in crypto-format-checking (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a95b535a5d579db23cf10d4a9897278238afb3093600235b1f39ddf2cca74600 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...
CVE-2024-23375 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL
Memory corruption during the network scan request...
MediaTek chip security vulnerabilities
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the vdec module, which may allow out-of-bounds writes...
MediaTek chip security vulnerabilities
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the Modem module, which may crash the system...
MediaTek chip security vulnerabilities
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the m4u module, which may allow out-of-bounds reads...
Marvell 88E6xxx Device Driver Buffer Overflow
The vulnerability of the mv88e6xxx.defaultmdiobus function in the drivers/net/dsa/mv88e6xxx/chip.c file of the Marvell 88E6xxx device driver in the Linux operating system is related to improper checking of the list. Exploiting this vulnerability could allow an attacker to compromise the integrity...
CVE-2024-41590
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...
CVE-2024-41590
The DrayTek Vigor310 router, in versions up to 4.3.2.6 , is susceptible to a stack-based buffer overflow vulnerability in its web interface. The root cause is a missing bounds check on parameters passed through POST requests to the strcpy function across several CGI endpoints . An authenticated u...
CVE-2024-41590
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...
PT-2024-7398 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to...
Juniper Networks Junos OS Evolved DoS
The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted TCP packets...
D-Link CGI Command Execution
The vulnerability of the CGI function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G+V2, DI-7100GV2, DI-7200GV2, DI-7300G+V2, and DI-7400G+V2 lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute...
