582 matches found
Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61061)
NETGEAR R6250 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...
Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61062)
NETGEAR D8500 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...
Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-63773)
The NETGEAR R8900, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...
Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61056)
NETGEAR R8900 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...
Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67656)
NETGEAR R9000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...
Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67658)
NETGEAR EX7000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in...
The vulnerability of the WebKit rendering module, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.
The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...
GNU C Library Buffer Overflow Vulnerability (CNVD-2020-29729)
The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A buffer overflow vulnerability exists in versions of the GNU C Library prior to 2.31. The vulnerability stems from a networked system or product performing operations in memory without properly...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 October 2019...
USN-4263-1: Sudo vulnerability | Cloud Foundry
Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access ...
Mozilla Thunderbird Buffer Overflow Vulnerability (CNVD-2020-10432)
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A buffer overflow vulnerability exists in Mozilla Thunderbird versions prior to 68.5. The...
PCRE Buffer Overflow Vulnerability
PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A buffer overflow vulnerability exists in versions of PCRE prior to 10.34. The vulnerability stems from a networked system or product...
Clam AntiVirus Buffer Overflow Vulnerability (CNVD-2020-04573)
Clam AntiVirus is an open source antivirus engine from the ClamAV team for detecting Trojans, viruses, malware and other malicious threats. A buffer overflow vulnerability exists in Clam AntiVirus. The vulnerability originates when a networked system or product performs an operation on memory...
Ubuntu 16.04 LTS / 18.04 LTS : Sudo vulnerability (USN-4263-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4263-1 advisory. Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this...
Ubuntu: Security Advisory (USN-4263-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4263-1: Sudo vulnerability
Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access to the administrator account...
fig2dev buffer overflow vulnerability (CNVD-2021-79776)
fig2dev is a tool for printing and exporting .fig format files. A buffer error vulnerability exists in the 'readtextobject' function of the read.c file in fig2dev version 3.2.7b. The vulnerability stems from a networked system or product that does not properly validate data boundaries when...
Cisco IOS XE Software Authentication, Authorization, and Accounting Login Authentication RCE (cisco-sa-20180606-aaa)
According to its self-reported version, Cisco IOS XE Software is affected by a remote code execution vulnerability in the authentication, authorization, and accounting AAA security services due to incorrect memory operations that the affected software performs when the software parses a username...
The vulnerability in the implementation of the graphics processing unit driver for Google Chrome browser allows a hacker to trigger a service failure.
The vulnerability in the implementation of the graphics processing engine of Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
CVE-2019-19391
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...