Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-26948)

NETGEAR D3600 and others are products of NETGEAR Corporation.NETGEAR D3600 is a wireless modem.NETGEAR JR6150 is a wireless router.NETGEAR PR2000 is a wireless router.NETGEAR JR6150 is a wireless router.NETGEAR JR6150 is a wireless router.NETGEAR JR6150 is a wireless router.NETGEAR JR6150 is a...

The vulnerability of Google Chrome’s browser, related to operations beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility through a...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability (CNVD-2020-27479)

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows a malicious actor to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

PoC exploit for CVE-2020-0796 - SMBv3 RCE. The target product/service is SMB Server Message Block protocol, specifically SMBv3. The vulnerability class/vector is RCE Remote Code Execution. The probable entry point is the scanner.py script, which sends a specially crafted SMB negotiate request to...

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

Belden HiOS and HiSecOS Buffer Overflow Vulnerabilities

Belden HiOS and Belden HiSecOS are both products of Belden, Inc. Belden HiOS is an operating system for Ethernet switches and Belden HiSecOS is an operating system for industrial security routers. A buffer overflow vulnerability exists in Belden HiOS and HiSecOS. The vulnerability originates when...

Moxa EDS-G516E Buffer Overflow Vulnerability

Moxa EDS-G516E is a managed switch from Moxa Taiwan, China. A buffer overflow vulnerability exists in the Moxa EDS-G516E Series using firmware version 5.2 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properly validating data...

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

QEMU Buffer Overflow Vulnerability (CNVD-2020-19909)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/display/bochs-display.c file in QEMU version 4.0.0. The vulnerability stems...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-PoC winners! Daniel García Gutiérrez @dan...

The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to the execution of operations beyond buffer boundaries in memory. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using a specially...

Data Modem Buffer Overflow Vulnerability in Multiple Qualcomm Products

Qualcomm MDM9206, etc. are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The SDX24 is a modem.The SDA660 is a central processing unit CPU product. A buffer overflow vulnerability exists in Data Modem in multiple Qualcomm products.The vulnerability...

A vulnerability in the can_can_gw_rcv function in the net/can/gw.c file of Linux operating system kernels allows a attacker to cause a service failure.

The vulnerability in the cancangwrcv function in the net/can/gw.c file of Linux operating system kernels relates to the possibility of writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-20195)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.SDX24 is a modem.MSM8917 is a central processing unit CPU product. A buffer overflow vulnerability exists in Multi-Mode Call Processor in multiple Qualcomm products. The vulnerabilit...

QEMU Buffer Overflow Vulnerability (CNVD-2020-10714)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the iSCSI Block driver in version 2.12.0 prior to QEMU 4.2.1. The vulnerability...

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

Mozilla Thunderbird Buffer Overflow Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A buffer overflow vulnerability exists in Mozilla Thunderbird versions prior to 68.5. The...

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

IBM Watson IoT Message Gateway Code Execution Vulnerability

IBM Watson IoT Message Gateway is an IoT solution. A security vulnerability exists in IBM Watson IoT Message Gateway. The vulnerability arises from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...