11047 matches found
K56138200: PHP vulnerability CVE-2016-3078
Security Advisory Description Multiple integer overflows in phpzip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted call to 1 getFromIndex or 2...
K15478: PHP vulnerability CVE-2012-2386
Security Advisory Description Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers...
K59722044: PHP vulnerabilities CVE-2016-1903 and CVE-2016-1904
Security Advisory Description CVE-2016-1903 The gdImageRotateInterpolated function in ext/gd/libgd/gdinterpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and...
CVE-2023-22236 Adobe Animate Heap-based Buffer Overflow Arbitrary code execution
Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
Fedora 36 : vim (2023-93fb5b08eb)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-93fb5b08eb advisory. 2169641 - Syntax highlight for sh files broken ---- The newest upstream commit Security fixes for CVE-2022-47024, CVE-2023-0433 Tenable has extracte...
CVE-2023-23782
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands...
CVE-2023-23782
Fortinet FortiWeb is affected by a heap-based buffer overflow in the CLI that can be exploited by an authenticated attacker to escalate privileges and potentially execute arbitrary code. The CVE-2023-23782 description covers FortiWeb versions 7.0.0–7.0.1, 6.3.0–6.3.19, and all 6.4, 6.2, and 6.1 v...
CVE-2023-0866 Heap-based Buffer Overflow in gpac/gpac
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV...
CVE-2023-0866
CVE-2023-0866 concerns the GPAC multimedia framework (gpac/gpac) prior to 2.3.0-DEV, with a heap-based buffer overflow vulnerability. The connected sources confirm the issue affects GPAC and describe the underlying flaw as a heap-based overflow. Debian advisories (DSA-5411-1) and related OSS/OSV ...
Adobe Animate Code Execution Vulnerabilities (APSB23-15) - Windows
The host is missing an important security update according to Adobe Animate February 2023 update. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2023-0841
A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...
CVE-2023-0841
Removed by vendor...
CVE-2023-0841
GPAC 2.3-DEV-rev40-g3602a5ded is affected by a vulnerability in the mp3_dmx_process function (filters/reframe_mp3.c) that causes a heap-based buffer overflow. The issue is exploitable remotely, with public disclosure of exploits. Affected component appears to be the mp3 demuxing path inside GPAC....
Out-of-bounds Write
freedroidrpg:sid is vulnerable to Out-of-bounds Write. vulnerability in 'map.c' within 'FreedroidRPG 1.0rc2' copies data from a file into a fixed size buffer without verifying its size. this can lead to heap-based buffer overflow...
CVE-2023-24550
Solid Edge heap-based buffer overflow CVE-2023-24550 affects Solid Edge SE2022 (all versions) and SE2023 (all versions) via parsing of specially crafted PAR files, enabling potentially code execution in the current process. The root cause is a heap-buffer issue during PAR file parsing. Siemens Pr...
Heap-Based Buffer Overflow
ring:sid is vulnerable to Heap-Based Buffer Overflow. An attacker is able to cause buffer over read by parsing a specially crafted STUN message with unknown attribute via multiple functions. This only affects applications using STUN including PJNATH and PJSUA-LIB...
SUSE SLED15: libtiff-devel / libtiff-devel-32bit / libtiff5 / libtiff5-32bit / etc (SUSE-SU-2023:0342-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0342-1 advisory. - CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image bsc1207413. Tenable...
Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)
The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After...
Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)
The version of Adobe Animate installed on the remote Windows host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After Free...
