PT-2021-2368

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System IGSS versions 15.0.0.21041 and prior Description A memory buffer vulnerability exists in the Interactive Graphical SCADA System IGSS Definition, which could result in loss of data or remote code execution whe...

IBM i2 Analyst’s Notebook Buffer Overflow

The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure or execute arbitrary code using a specially created file with...

PT-2021-2330

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System IGSS versions 15.0.0.21041 and prior Description A memory buffer vulnerability exists due to improper restriction of operations within the bounds of a memory buffer, which could result in arbitrary read or...

PT-2021-2378

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System IGSS versions 15.0.0.21041 and prior Description A memory buffer vulnerability exists, which could cause remote code execution when a malicious CGF Configuration Group File file is imported to IGSS Definition...

CVE-2021-20276: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcrecompile may lead to denial of service...

SCALANCE X-200 Web Server Heap Buffer Overflow

The vulnerability of the web server of industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...

Junos Buffer Overflow DoS

The vulnerability of the Junos operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a service failure using specially crafted DHCP packets...

Intel 7360 Cell Modem Router Buffer Overflow DoS

The vulnerability of the microprogramming software of the Intel 7360 Cell Modem lies in the fact that the operation results are written outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Openscad import_stl.cc:import_stl() out-of-bounds stack write vulnerability

Summary An out-of-bounds write vulnerability exists in the importstl.cc:importstl functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Openscad...

Realtek RTL8723BS DoS

The vulnerability of the Wi-Fi drivers of the Realtek RTL8723BS wireless network adapter lies in the fact that operations are performed outside of the buffer in memory when processing SSID packet data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SQLite Buffer Overflow Info Disclosure

The vulnerability of the SQLite database management system is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe Premiere Rush Buffer Overflow

The vulnerability of Adobe Premiere Rush relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

CVE-2020-28144: Improper Restriction of Operations within the Bounds of a Memory Buffer

Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code...

Adobe Media Encoder Buffer Overflow Code Execution

The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CentOS 8 : python-pillow (CESA-2020:0580)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0580 advisory. - python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service CVE-2019-16865 -...

EDR-G903 Series Buffer Overflow DoS

The vulnerability of the EDR-G903 Series, EDR-G902 Series, and EDR-810 Series industrial routers lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted...

Cisco Video Surveillance IP camera Reboot

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series lies in the fact that the operation is executed outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a restart of the IP camera...

CVE-2020-11149: Improper Restriction of Operations within the Bounds of a Memory Buffer

Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1068

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or escalation of privileges...