CVE-2020-25722

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...

Design/Logic Flaw

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...

PT-2022-28416

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 4.19.227 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2022-28498

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.10.98 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.4.177 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2022-28369

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations For...

CVE-2020-25722

CVE-2020-25722 affects Samba AD DC and concerns inadequate access and conformance checking of stored data, potentially enabling total domain compromise. Public references in multiple feeds confirm the impact on Samba AD DC and that affected packages (e.g., Samba) require upgrading. Debian advisor...

CVE-2020-25722

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...

Google Android Buffer Overflow Vulnerability (CNVD-2022-16338)

Google Android is a Linux-based open-source operating system from Google, Inc. The Google Android buffer overflow vulnerability stems from improper boundary checking. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...

Google Android arbitrary memory write vulnerability

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to arbitrary memory writes, which can be exploited by attackers to perform arbitrary memory writes and code execution due to incorrect boundary checking in the edenruntime hal service...

truffleHog - Searches Through Git Repositories For High Entropy Strings And Secrets, Digging Deep Into Commit History

Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. Join The Slack Have questions? Feedback? Jump in slack and hang out with me...

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe...

Google Android security vulnerabilities

Google Android is a Linux-based open-source operating system from Google, Inc. The Google Android buffer overflow vulnerability stems from improper boundary checking. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...

Out of bounds read in Tensorflow

Impact TensorFlow's type inference can cause a heap OOB read as the bounds checking is done in a DCHECK which is a no-op during production: cc if nodet.typeid != TFTUNSET int ix = inputidxi; DCHECKix nodet.argssize "input " i " should have an output " ix " but instead only has " nodet.argssize "...

Rockwell Automation 1794-AENT Flex I/O Series B Buffer Copy Without Checking Size of Input (CVE-2020-6083)

An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen- Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious...

CVE-2022-22723

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and arbitrary code execution when specially crafted packets are sent to the device over the network. Protection functions and tripping function via GOOSE can be...

Heap overflow

Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a DCHECK which is a no-op during production. An attacker can control the inputidx variable such that ix would be larger than the number of...

PYSEC-2022-156

Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a DCHECK which is a no-op during production. An attacker can control the inputidx variable such that ix would be larger than the number of...

CVE-2022-23592 Out of bounds read in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a DCHECK which is a no-op during production. An attacker can control the inputidx variable such that ix would be larger than the number of...

CVE-2022-23592 Out of bounds read in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a DCHECK which is a no-op during production. An attacker can control the inputidx variable such that ix would be larger than the number of...