Buffer Overflow

libzephyr.so is vulnerable to Buffer overflow. The vulnerability is due to signed to unsigned conversion when passing a negative size to memcpy, which can lead to buffer overflow in the esp32ipmsend function...

CVE-2023-6249

Signed to unsigned conversion esp32ipmsend...

Design/Logic Flaw

Signed to unsigned conversion esp32ipmsend...

CVE-2023-6249 ipm: signed to unsigned conversion problem in esp32_ipm_send

Signed to unsigned conversion esp32ipmsend...

CVE-2023-6249

CVE-2023-6249 affects the Zephyr RTOS component esp32_ipm_send. The root cause is a signed-to-unsigned conversion that can cause a buffer overflow in esp32_ipm_send (as described by Veracode), elevating risk for affected builds. Public documents describe a buffer overflow condition but do not spe...

CVE-2023-6249 ipm: signed to unsigned conversion problem in esp32_ipm_send

Signed to unsigned conversion esp32ipmsend...

PT-2024-14913 · Espressif · Esp32 Ipm Send

Name of the Vulnerable Software and Affected Versions: esp32 ipm send affected versions not specified Description: The issue involves a signed to unsigned conversion in the esp32 ipm send function. This could potentially lead to unexpected behavior or errors. No information is provided about the...

CVE-2023-28063

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

Privilege escalation

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2023-28063

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2023-28063

CVE-2023-28063 affects Dell BIOS. Root cause: a signed-to-unsigned conversion error. Local authenticated admin can exploit to cause a denial of service. Dell-DSA-2023-176 and Dell KB 000214780 document the fix; Nessus plugin notes a patch is available. If exploited, impact is DoS on the affected ...

CVE-2023-28063

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

PT-2024-12397 · Qualcomm · Snapdragon +92

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS while converting from an authorization token to a HIDL vector. No information is provided about the estimat...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption in HLOS when converting from authorization tokens to HIDL vectors...

WooCommerce Conversion Tracking < 2.0.12 - Subscriber+ Addon Installation

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcctinstallhappyaddons' function, allowing any authenticated users, such as subscriber to install the Happy Elementor Addons plugin...

Conversion Manager 8.3.1 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Update? This Conversion Manager virtual appliance update is for customers who use the Conversion Manager feature of Citrix Hypervisor 8.2 CU1. It constitutes the following deliverable: File Name| CitrixHypervisor-8.2.1-vpx-conversion-8.3.1.xva ---|--- Description| This fil...

[SECURITY] Fedora 38 Update: ncurses-6.4-7.20230520.fc38

The curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses new curses library is a freely distributable replacement for the discontinued 4.4 BSD classic curses library. This package contains support utilities, including a...

WordPress WooCommerce Conversion Tracking Plugin <= 2.0.11 is vulnerable to Broken Access Control

Software WooCommerce Conversion Tracking Type Plugin Vulnerable versions = 2.0.11 Fixed in 2.0.12 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24711 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f258cf84223e Credits Abdi Pranat...

PT-2024-20002

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.12.5 Description A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue is related to the conversion of source code to build artifacts. As ...

python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int"text", a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16, and 32 are no...