SonicWall SMA Buffer Overflow DoS

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is caused by buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

UBUNTU-CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2022-37066

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS...

UPX Buffer Error Vulnerability

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the invertptdynamic function of its plxelf.cpp...

UPX Buffer Error Vulnerability

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the invertptdynamic function of its plxelf.cpp...

CVE-2022-38132

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL...

HDF5 ReadGifHeader Code Execution

The vulnerability of the ReadGifHeader function in the HDF5 library libhdf5 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system by having the user open a specially created malicious GIF file...

CVE-2022-38132

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL...

Path Traversal

gravitee-gateway-core is vulnerable to path traversal. The vulnerability exists due to the lack of dynamic routing checks in the selectUserDefinedEndpoint function of TargetEndpointResolver.java, allowing an attacker to read arbitrary files outside the expected directory via a...

Cscape Buffer Overflow Code Execution

The vulnerability of the Cscape software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

MAL-2022-1404 Malicious code in babel-lugin-dynamic-i9port-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15795da980aca09e89837d11f5565a68c61e5b779062fae4eb410f3a24bddbc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in babel-lugin-dynamic-i9port-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in babel-lugin-dynamic-i9port-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15795da980aca09e89837d11f5565a68c61e5b779062fae4eb410f3a24bddbc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1444 Malicious code in bablpluginsyntaxdynamicimport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c59572f2bc92d923ebe87aeee4cc1ccb84e1e60c29e5f6fbe6a0ca8bda407b8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Downloads function Code Execution

The vulnerability of the Downloads function in Microsoft Edge and Google Chrome is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

DEBIAN-CVE-2020-27787

A Segmentaation fault was found in UPX in invertptdynamic function in plxelf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service...

DEBIAN-CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

UBUNTU-CVE-2020-27790

A floating point exception issue was discovered in UPX in PackLinuxElf64::invertptdynamic function of plxelf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of service. The highest impact is to Availability...

UPX numerical error vulnerability

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 3.96, which stems from a floating-point exception issue found in the PackLinuxElf64::invertptdynamic function of the plxelf.cpp file, which can be triggered by an attacker with a crafte...

Vim compile_lock_unlock() Data Compromise

The vulnerability of the compilelockunlock function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...