Omron CX-Supervisor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor: Omron Equipment: CX-Supervisor Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-Of-Bounds Read, Use-After-Free, Incorrect Type Conversion or Cast 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

CVE-2018-18310: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

The vulnerability of the `sdcardfs_open` function in the Android operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the sdcardfsopen function in the Android operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2018-12541

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...

CVE-2018-8423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1,...

CVE-2018-18197: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

CVE-2018-18193: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

Philips iSite/IntelliSpace PACS Vulnerabilities (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Code/Source Code...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...

CVE-2018-16713: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

Vulnerability of Firefox, Firefox ESR, and Thunderbird’s email client, caused by overflowing memory buffers, allowing attackers to execute arbitrary code.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are caused by a buffer overflow in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

CVE-2018-1149: Improper Restriction of Operations within the Bounds of a Memory Buffer

cgisystem in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iobit Advanced_Systemcare

CVE-2018-16711 PoC code for CVE-2018-...

CVE-2018-17143: Improper Restriction of Operations within the Bounds of a Memory Buffer

The html package aka x/net/html through 2018-09-17 in Go mishandles...

CVE-2018-17076: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iobit Advanced_Systemcare

CVE-2018-16713 PoC code for CVE-2018-...

The vulnerability of the IBM Security Access Manager access control system arises from an operation that goes beyond the buffer in memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Security Access Manager lies in the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

CVE-2018-8464: Improper Restriction of Operations within the Bounds of a Memory Buffer

An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge...

CVE-2017-1085: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-RELEASE, an application which calls setrlimit to increase RLIMITSTACK may turn a read-only memory region below the stack into a read-write region. A specially crafted executable could be exploited to execute arbitrary code in the user context...

CVE-2017-1084: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow...