19795 matches found
PT-2021-23051
Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.3.0 through 6.3.15 FortiWeb versions 6.4.0 through 6.4.1 Description Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb may allow a remote authenticated attacker to execute arbitrary...
CVE-2021-20043: Heap-based Buffer Overflow
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...
Ubuntu 18.04 LTS : Long Range ZIP vulnerabilities (USN-5171-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5171-1 advisory. It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz files. A remote attacker could possibly use this issue to cause a...
CVE-2021-41017: Out-of-bounds Write
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests...
PT-2021-20748
Name of the Vulnerable Software and Affected Versions: Bentley View version 10.15.0.75 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...
PT-2021-20744
Name of the Vulnerable Software and Affected Versions: Bentley View version 10.15.0.75 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...
Bentley View JT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...
Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...
CVE-2021-24041: Heap-based Buffer Overflow
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image...
Protect
A heap-based buffer overflow CWE-122 in the firmware signature verification function of FortiOS may allow an attacker to execute arbitrary code via specially crafted installation images...
Daniel Kamil Kozar tsMuxer buffer overflow vulnerability
Daniel Kamil Kozar tsMuxer is an application open sourced by Daniel Kamil Kozar. A transport stream mixer for remixing/mixing basic streams. Daniel Kamil Kozar tsMuxer 2.6.16 is vulnerable to a buffer overflow vulnerability that originates from the function BitStreamReader::getCurVal in bitStream...
PT-2021-7463
Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.4.1 through 6.4.0 FortiWeb versions 6.3.15 and earlier FortiWeb versions 6.2.6 and earlier Description A heap-based buffer overflow in FortiWeb allows an attacker to execute unauthorized code or commands via crafted HTTP...
CVE-2021-35344
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h...
CVE-2021-35346
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::shorttermrefpicsetint in hevc.cpp...
Heap overflow
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::shorttermrefpicsetint in hevc.cpp...
CVE-2021-35346
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::shorttermrefpicsetint in hevc.cpp...
CVE-2021-35346
tsMuxer v2.6.16 contains a heap-based buffer overflow in HevcSpsUnit::short_term_ref_pic_set(int) within hevc.cpp. This is identified under CVE-2021-35346. Connected documents confirm the vulnerability and its existence but do not provide explicit remediation steps or patch details. Exploitation ...
CVE-2021-35344
CVE-2021-35344 (tsMuxer 2.6.16) : A heap-based buffer overflow exists in BitStreamReader::getCurVal in bitStream.h. Affected product: tsMuxer v2.6.16. Root cause: heap overflow vulnerability in a BitStreamReader function. Impact per CVSS: high/critical metrics indicate potential network-based exp...
