The vulnerability of the Packet Forwarding Engine (PFE) in the Junos OS router of the Juniper SRX4600, which allows a attacker to cause a service failure

The vulnerability of the Packet Forwarding Engine PFE mechanism in the Junos OS router Juniper SRX4600 relates to the operation of writing data outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted netwo...

The vulnerability of the analysis function of the EVCD software for VCD/EVCD GTKWave allows a perpetrator to execute arbitrary code.

The vulnerability of the EVCD analysis function in the VCD/EVCD GTKWave software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Security Advisory - Memory Overflow Vulnerability in Some Huawei Smart Speakers

Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail.Vulnerability ID:HWPSIRT-2022-52860 This vulnerability has been assigned a CVEID:CVE-2022-48681...

PT-2024-3088

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description The issue is related to object corruption in WebAssembly, which could allow a remote attacker to potentially exploit object corruption via...

The vulnerability of the SCSI CD/DVD Device Emulation mode in VMware Fusion and Vmware Workstation allows a hacker to execute arbitrary code.

The vulnerability of the SCSI CD/DVD Device Emulation mode in VMware Fusion and Vmware Workstation lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2023-43768

CVE-2023-43768 affects Couchbase Server 6.6.x through 7.2.0, and pre-7.2.1 releases (before 7.1.5 and 7.2.1). Unauthenticated users can cause memcached to exhaust memory by issuing large commands. Red Hat notes the issue across Couchbase Server 6.6.x–7.2.0 and 7.1.5–7.2.0, while CNNVD describes a...

CVE-2024-21913

A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthorized code into the software by overstepping the memory boundaries, which triggers an access violation. Once inside, the threat actor can ru...

CVE-2024-21913

Summary: Rockwell Automation Arena Simulation Software is affected by a heap-based memory buffer overflow vulnerability (CWE-122) that can allow a malicious user to run arbitrary code by overstepping memory boundaries, triggered by opening a malicious file. Affected product: Arena Simulation Soft...

PT-2024-2517 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: A heap-based memory buffer overflow vulnerability could potentially allow a malicious user to insert unauthorized code into the software by overstepping the...

CVE-2024-28243

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

DEBIAN-CVE-2024-28243

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

CVE-2024-28243

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

CVE-2024-28243 KaTeX's maxExpand bypassed by \edef

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

CVE-2024-28243

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

CVE-2024-28243 KaTeX's maxExpand bypassed by \edef

KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where...

KaTeX's maxExpand bypassed by `\edef`

Impact KaTeX users who render untrusted mathematical expressions could encounter malicious input using \edef that causes a near-infinite loop, despite setting maxExpand to avoid such loops. This can be used as an availability attack, where e.g. a client rendering another user's KaTeX input will b...

The vulnerability of the expireOldFailedAttempts() function in the declarative tool for continuous delivery in GitOps for Kubernetes Argo CD allows a attacker to trigger a service failure.

The vulnerability of the expireOldFailedAttempts function in the GitOps continuous delivery declarative tool for Kubernetes Argo CD is related to an operation going beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size

A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation...

Backdoor.Win32.Emegrab.b MVID-2024-0675 Buffer Overflow

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/19a14d0414aec62ef38378de2e8b259d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Emegrab.b Vulnerability: Remote Stack Buffer Overflow SEH Family: Emegrab...

The vulnerability of the thunderx_ocx_com_threaded_isr() function in the drivers/edac/thunderx_edac.c driver of the EDAC (Error Detection and Correction) kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the thunderxocxcomthreadedisr function in the drivers/edac/thunderxedac.c driver of the EDAC Error Detection and Correction kernel of the Linux operating system is related to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to...