302 matches found
CVE-2021-45927
Removed by vendor...
CVE-2021-45927
MDB Tools (mdbtools) 0.9.2 has a stack-based buffer overflow in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). This CVE-2021-45927 is confirmed across multiple sources. The exposed component and function are stated; no exploit details are provided in the documents ...
CVE-2021-45927
MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd6e029ee0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...
CVE-2021-45927
MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd6e029ee0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...
PT-2021-24317 · Mdb Tools · Mdb Tools
Name of the Vulnerable Software and Affected Versions: MDB Tools aka mdbtools version 0.9.2 Description: The issue is a stack-based buffer overflow in the mdb numeric to string function, which is called from mdb xfer bound data and mdb attempt bind. This overflow occurs at the memory address...
CVE-2021-45926: Out-of-bounds Write
MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd0c689be0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...
CVE-2021-45927: Out-of-bounds Write
MDB Tools aka mdbtools 0.9.2 has a stack-based buffer overflow at 0x7ffd6e029ee0 in mdbnumerictostring called from mdbxferbounddata and mdbattemptbind...
PT-2021-24316 · Mdb Tools · Mdb Tools
Name of the Vulnerable Software and Affected Versions: MDB Tools aka mdbtools version 0.9.2 Description: The issue is a stack-based buffer overflow in the mdb numeric to string function, which is called from mdb xfer bound data and mdb attempt bind. This overflow occurs at the memory address...
mdb Database DoS
The vulnerability of the mdb database in the Interactive Graphical SCADA System IGSS is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2021-27657
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a dynamic stack buffer overflow, which occurs when writing 16 bytes. The crash involves several functions, including mdb numeric ...
PT-2021-28349
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a dynamic stack buffer overflow. The crash occurs during the execution of specific functions, including mdb...
CVE-2020-10375
An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily reversed. The file data.mdb contains these obfuscated passwords in the second column. NOTE: this is unrelated to the popular Smarty template engine product...
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...
DEBIAN-CVE-2019-16224
An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
UBUNTU-CVE-2019-16228
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
PYSEC-2019-239
An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...
PT-2019-14588
Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97 Description An issue was discovered in py-lmdb where for certain values of mp flags, mdb page touch does not properly set up mc-mc pgmc-top, leading to an invalid write operation. This issue occurs when accessing a data.md...
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...