CVE-2024-7347: Buffer Over-read

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngxhttpmp4module and the mp4 directi...

SUSE CVE-2014-0160

The 1 TLS and 2 DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys,...

Adobe Illustrator Heap Buffer Overflow Code Execution

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as well as to increase their privileges...

[SECURITY] [DLA 1731-2] linux regression update

Package : linux Version : 3.16.64-2 CVE ID : CVE-2016-10741 CVE-2017-5753 CVE-2017-13305 CVE-2018-3639 CVE-2018-5848 CVE-2018-5953 CVE-2018-12896 CVE-2018-13053 CVE-2018-16862 CVE-2018-16884 CVE-2018-17972 CVE-2018-18281 CVE-2018-18690 CVE-2018-18710 CVE-2018-19824 CVE-2018-19985 CVE-2018-20169...

[SECURITY] [DLA 1731-1] linux security update

Package : linux Version : 3.16.64-1 CVE ID : CVE-2016-10741 CVE-2017-5753 CVE-2017-13305 CVE-2018-3639 CVE-2018-5848 CVE-2018-5953 CVE-2018-12896 CVE-2018-13053 CVE-2018-16862 CVE-2018-16884 CVE-2018-17972 CVE-2018-18281 CVE-2018-18690 CVE-2018-18710 CVE-2018-19824 CVE-2018-19985 CVE-2018-20169...

CVE-2015-9210

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2015-9210

CVE-2015-9210 affects Android devices using Qualcomm Snapdragon components (including Snapdragon Automobile, Mobile, Wear, and various SD variants listed). The issue is a lack of input validation in playready_licacq_process_response(), which can lead to memory over-read. The cited CVSS v3.0 metri...

CVE-2015-9210: Improper Input Validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

PT-2018-4543

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation in the playready licacq process response function, which can lead to a memory over read. Recommendations For Android...

Design/Logic Flaw

The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...

CVE-2014-0704

The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...

CVE-2014-0704: Undefined Security Weakness

The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...

PT-2014-1325

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 4.x through 7.3, except version 7.0.250.0 and later Description The issue is related to the implementation of IGMP for Cisco Wireless LAN Controller devices when IGMPv3 Snooping is enabled. It allows remo...