Ashlar-Vellum 安全漏洞

Ashlar Vellum is Ashlar's development platform for computer-aided design CAD and 3D modeling software. A security vulnerability exists in Ashlar-Vellum that stems from the presence of a heap-based buffer overflow remote code execution vulnerability that could allow a remote attacker to execute...

Ashlar Vellum Cobalt 安全漏洞

Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar. A security vulnerability exists in Ashlar Vellum Cobalt that stems from the presence of a heap-based buffer overflow remote code execution vulnerability that could allow a remote attacker to execu...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Heap-based Buffer Overflow (CVE-2023-5404)

Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This plugin only works with Tenable.ot. Please visit...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Heap-based Buffer Overflow (CVE-2023-5400)

Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-47212

A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-47212

A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-47212

CVE-2023-47212 affects stb_vorbis.c v1.22. A heap-based buffer overflow via the comment handling in stb_vorbis can occur with a crafted .ogg file. The root cause is an integer overflow in sizeof(char*) * (f->comment_list_length) in start_decoder, leading to under-allocation of memory and an ou...

CVE-2023-26793

CVE-2023-26793 affects libmodbus v3.1.10 with a heap-based buffer overflow in read_io_status (src/modbus.c). The CVSS v3.1 base score is 9.8 (CRITICAL). Connected sources indicate the vulnerability is unpatched in some environments (Nessus entry notes no vendor patch available); monitor for updat...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

stb_vorbis 缓冲区错误漏洞

stbvorbis is an open source audio decoder for decoding ogg vorbis files. A buffer error vulnerability exists in stb vorbis.c version v1.22, which stems from the presence of a heap-based buffer overflow vulnerability that could lead to out-of-bounds writes...

CVE-2023-26793

libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in readiostatus function in src/modbus.c...

CVE-2023-26793

Removed by vendor...

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

frr: out of bounds read in bgp_attr_aigp_valid

A flaw was found in FRRouting that involves a heap-based buffer overflow in the bgpattraigpvalid function within bgpd/bgpattr.c. This flaw allows a remote attacker to send specially crafted data to the application, initiating an out-of-bounds read error and executing a denial of service DoS attac...

RHEL 9 : libjpeg-turbo (RHSA-2024:2295)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2295 advisory. The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the...

RHEL 9 : tigervnc (RHSA-2024:2616)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2616 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

RHEL 7 : tigervnc (RHSA-2024:2080)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2080 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

AlmaLinux 8 : tigervnc (ALSA-2024:2037)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:2037 advisory. - A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length...