Embedthis Software GoAhead Buffer Overflow Vulnerability

Embedthis Software GoAhead is an embedded Web server from Embedthis Software, USA. A buffer overflow vulnerability exists in Embedthis Software GoAhead versions prior to 5.0.1. The vulnerability stems from a network system or product performing operations in memory without properly validating dat...

The vulnerability of the types.cpp component in the Exiv2 media metadata management library, which allows a hacker to cause a service failure.

The vulnerability of the types.cpp component in the Exiv2 metadata management library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure SIGABRT by calling the...

Oniguruma Buffer Overflow Vulnerability

Oniguruma is a BSD-licensed regular expression library that supports multiple character encodings. A buffer overflow vulnerability in the 'fetchintervalquantifier' function of the regparse.c file in versions 6.x prior to Oniguruma 6.9.4rc2, which originates when a networked system or product...

tcpdump buffer overflow vulnerability (CNVD-2019-41905)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to properly valida...

tcpdump buffer overflow vulnerability (CNVD-2019-41906)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to properly valida...

GSNDCP Module Buffer Overflow Vulnerability in Multiple Qualcomm Products

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

ARM Mbed OS CoAP library buffer overflow vulnerability

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in Arm Mbed OS version 5.14.0. T...

Fuji Electric V-Server Buffer Overflow Vulnerability (CNVD-2019-41427)

Fuji Electric V-Server is a suite of software for collecting and managing real-time field data from Fuji Electric Japan. A buffer overflow vulnerability exists in Fuji Electric V-Server 4.0.6 and prior versions, which originates when a networked system or product performs an operation in memory...

wolfSSL buffer overflow vulnerability (CNVD-2019-41425)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A buffer overflow vulnerability exists in the DecodedCert structure of GetName in wolfcrypt/src/asn.c file in wolfSSL versions 4.1.0...

Dell RSA BSAFE Micro Edition Suite Buffer Overflow Vulnerability

Dell RSA BSAFE Micro Edition Suite is an encryption toolkit from Dell USA. A buffer overflow vulnerability exists in Dell RSA BSAFE Micro Edition Suite. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries,...

LEAD Technologies LEADTOOLS Heap Overflow Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. A buffer error vulnerability exists in the JPEG2000 parsing functionality in LEAD Technologies LEADTOOLS. The vulnerability originates when a networked system or product performs an operation on memory...

Mozilla Firefox, Firefox ESR and Thunderbird Buffer Overflow Vulnerability (CNVD-2020-14255)

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

Mozilla Firefox, Mozilla Firefox ESR and Thunderbird Buffer Overflow Vulnerabilities

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

nipper-ng buffer overflow vulnerability

nipper-ng is an open source penetration testing tool. A buffer overflow vulnerability exists in the 'processPrivilage' function of the IOS/process-general.c file in version 0.11.10 of nipper-ng. The vulnerability stems from a networked system or product that does not correctly validate data...

KMPlayer Buffer Overflow Vulnerability

KMPlayer is a video player for Linux and UNIX operating systems from the KMPlayer team. The player uses Mplayer, Xine and GStreamer as decoding backends, and is one of the components of KDE. A buffer overflow vulnerability exists in KMPlayer version 4.2.2.31. The vulnerability stems from a...

Suricata Buffer Overflow Vulnerability (CNVD-2019-34384)

Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...

The vulnerability in the driver drivers/scsi/qedi/qedi_dbg.c of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability in the driver drivers/scsi/qedi/qedidbg.c of the Linux operating system relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2019-5612

In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program c...

cPanel cross-site scripting vulnerability (CNVD-2019-29020)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in WHM Edit System Mail Preferences in versions prior to cPanel 55.9999.141. The vulnerability...

Linux kernel buffer overflow vulnerability (CNVD-2019-29639)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'i2csmbusxferemulated' function in the drivers/i2c/i2c-core-smbus.c file in versions of Linux kernel prior to 4.14.15. Th...