CVE-2018-8423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1,...

CVE-2018-16713: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

CVE-2018-17411: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iobit Advanced_Systemcare

CVE-2018-16711 PoC code for CVE-2018-...

CVE-2017-1084: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow...

CVE-2018-16521: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...

CVE-2018-15120: Improper Restriction of Operations within the Bounds of a Memory Buffer

libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted text with invalid Unicode sequences...

CVE-2018-15175: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView 2.45 allows remote attackers to cause a denial of service User Mode Write AV starting at Qt5Core!QVariant::QVariant+0x0000000000000014 and application crash or possibly have unspecified other impact via a crafted RLE file...

CVE-2018-15176: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView 2.45 allows remote attackers to cause a denial of service User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash or possibly have unspecified other impact via a crafted RLE file...

CVE-2018-14741: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcpatternpack in pattern.c...

PT-2018-10152 · Red Hat · Redhat-Certification

Name of the Vulnerable Software and Affected Versions: redhat-certification affected versions not specified Description: The issue allows a remote attacker to download any file accessible by the user running httpd through the /download page, due to improper restriction of files by...

CVE-2018-14362: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...

CVE-2018-14065: Improper Restriction of XML External Entity Reference

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...

CVE-2018-14047: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed for reading untrusted files with it. Do NOT use this in sensitive environments, especially DO NOT read PNGs from unknown sources with it!"...

CVE-2018-10596: Improper Restriction of Communication Channel to Intended Endpoints

Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a...

CVE-2018-12576: Improper Restriction of Rendered UI Layers or Frames

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-5718

The CVE affects SafeN’Sec SoftControl/SafenSoft products: SysWatch, TPSecure, and Enterprise Suite, where snscore.sys allows improper restriction of write operations within memory buffer bounds. The root cause is buffer-boundary checks in snscore.sys, enabling a local attacker to cause a denial o...

CVE-2018-7522: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states...

CVE-2017-12714: Improper Restriction of Power Consumption

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

CVE-2016-8384: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter...