CVE-2023-35709 Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-34289 Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-32157 Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

Tesla Model 3 bsaserver BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Heap-based Buffer Overflow (CVE-2023-5404)

Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This plugin only works with Tenable.ot. Please visit...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Heap-based Buffer Overflow (CVE-2023-5400)

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-47212

A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-47212

CVE-2023-47212 affects stb_vorbis.c v1.22. A heap-based buffer overflow via the comment handling in stb_vorbis can occur with a crafted .ogg file. The root cause is an integer overflow in sizeof(char*) * (f->comment_list_length) in start_decoder, leading to under-allocation of memory and an ou...

CVE-2023-26793

CVE-2023-26793 affects libmodbus v3.1.10 with a heap-based buffer overflow in read_io_status (src/modbus.c). The CVSS v3.1 base score is 9.8 (CRITICAL). Connected sources indicate the vulnerability is unpatched in some environments (Nessus entry notes no vendor patch available); monitor for updat...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-26793

Removed by vendor...

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Fedora 37 : mbedtls (2023-7456a62f60)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7456a62f60 advisory. - Update to 2.28.2 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2 Tenable has extracted the preceding description block...

Fedora 40 : openexr (2024-55247f3a4f)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-55247f3a4f advisory. Automatic update for openexr-3.1.10-5.fc40. Changelog Mon Feb 5 2024 Benjamin A. Beasley - 3.1.10-5 - Backport proposed fix for CVE-2023-5841 to 3.1.10 fix...

RHEL 4 : samba (RHSA-2012:0478)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0478 advisory. Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible...

PT-2024-20718 · Ibm · Ibm Mq Appliance

Name of the Vulnerable Software and Affected Versions: IBM MQ Appliance versions 9.3 CD and LTS Description: The issue is caused by improper bounds checking, leading to a heap-based buffer overflow. A remote authenticated attacker could overflow a buffer, potentially executing arbitrary code on t...

CentOS 9 : sqlite-3.34.1-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the sqlite-3.34.1-7.el9 build changelog. - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file...

CentOS 9 : zlib-1.2.11-41.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the zlib-1.2.11-41.el9 build changelog. - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment...