Moxa EDS-G516E Buffer Overflow Vulnerability

Moxa EDS-G516E is a managed switch from Moxa Taiwan, China. A buffer overflow vulnerability exists in the Moxa EDS-G516E Series using firmware version 5.2 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properly validating data...

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

QEMU Buffer Overflow Vulnerability (CNVD-2020-19909)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/display/bochs-display.c file in QEMU version 4.0.0. The vulnerability stems...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-PoC winners! Daniel García Gutiérrez @dan...

The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to the execution of operations beyond buffer boundaries in memory. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using a specially...

A vulnerability in the can_can_gw_rcv function in the net/can/gw.c file of Linux operating system kernels allows a attacker to cause a service failure.

The vulnerability in the cancangwrcv function in the net/can/gw.c file of Linux operating system kernels relates to the possibility of writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Data Modem Buffer Overflow Vulnerability in Multiple Qualcomm Products

Qualcomm MDM9206, etc. are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The SDX24 is a modem.The SDA660 is a central processing unit CPU product. A buffer overflow vulnerability exists in Data Modem in multiple Qualcomm products.The vulnerability...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-20195)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.SDX24 is a modem.MSM8917 is a central processing unit CPU product. A buffer overflow vulnerability exists in Multi-Mode Call Processor in multiple Qualcomm products. The vulnerabilit...

QEMU Buffer Overflow Vulnerability (CNVD-2020-10714)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the iSCSI Block driver in version 2.12.0 prior to QEMU 4.2.1. The vulnerability...

The vulnerability of the NTLM authentication module in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the NTLM authentication module in the RDP client FreeRDP arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

Mozilla Thunderbird Buffer Overflow Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A buffer overflow vulnerability exists in Mozilla Thunderbird versions prior to 68.5. The...

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

IBM Watson IoT Message Gateway Code Execution Vulnerability

IBM Watson IoT Message Gateway is an IoT solution. A security vulnerability exists in IBM Watson IoT Message Gateway. The vulnerability arises from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

The vulnerability of the vcs_write function in the Linux kernel’s drivers/tty/vt/vc_screen.c file, which allows a hacker to increase their privileges.

The vulnerability of the vcswrite function in the Linux kernel’s drivers/tty/vt/vcscreen.c file is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Libbsd Buffer Overflow Vulnerability

libbsd is a library that provides features commonly found in BSD systems. A buffer overflow vulnerability exists in the nlist.c file in versions of libbsd prior to 0.10.0. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

Netwide Assembler Buffer Overflow Vulnerability (CNVD-2020-02979)

Netwide Assembler NASM is a Linux-based assembler. The product is capable of creating binaries and writing bootloaders. A buffer overflow vulnerability exists in the expr function of the asm/eval.c file in version 2.14.02 of Netwide Assembler NASM. The vulnerability stems from a networked system ...

Pillow SGI Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/SgiRleDecode.c file in Pillow versions prior to 6.2.2. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data...

Multiple Apple Products Disk Images Component Out-of-Bounds Read Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Disk Images is one of the components of the Disk Image Format. An out-of-bounds read vulnerability exists in the Disk...

Libspiro 'spiro_to_bpath0()' function buffer overflow vulnerability

Libspiro is a curve plotting library. A buffer overflow vulnerability exists in the 'spirotobpath0' function in the spiro.c file in Libspiro 20190731 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

cyrus-sasl buffer overflow vulnerability

cyrus-sasl is an implementation of the Cyrus SASL Simple Authentication Security Layer API capable of providing authentication authorization services on both the client and server side. A buffer overflow vulnerability exists in cyrus-sasl version 2.1.27. The vulnerability stems from a network...