7753 matches found
CVE-2023-25518
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...
Input validation
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to cause unexpected system termination or read kernel memory...
CVE-2023-25518: Improper Restriction of Communication Channel to Intended Endpoints
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...
CVE-2023-2989
Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...
Authentication flaw
Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...
CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read
Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...
CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read
Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...
CVE-2023-2989
CVE-2023-2989 affects Fortra Globalscape EFT administration server prior to 8.1.0.16, due to an out-of-bounds memory read that can permit authentication bypass. Public details describe a blind read flaw in the EFT admin protocol, enabling a logged-in attacker to impersonate another user under cer...
ffmpeg:ffmpeg_dem_EVC_fuzzer: Crash in av_freep
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6247206014025728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x616df5dd9240 Crash...
PT-2023-22459
Name of the Vulnerable Software and Affected Versions Fortra Globalscape EFT versions prior to 8.1.0.16 Description The issue concerns an out of bounds memory read in the administration server, which can be exploited to crash the service or bypass authentication. Recommendations For versions prio...
PT-2025-37529
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the UDF charset conversion code. For filenames starting with '.' and between 2 and 5 characters long, the code reads uninitialized memory in the outpu...
EulerOS Virtualization 3.0.6.0 : httpd (EulerOS-SA-2023-2240)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location...
CVE-2023-34341
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering...
PT-2023-24827
Name of the Vulnerable Software and Affected Versions AMI BMC affected versions not specified Description The issue affects the SPX REST API, allowing an attacker with the required privileges to read and write to arbitrary locations within the memory context of the IPMI server process. This could...
Amazon Linux AMI : pcre (ALAS-2023-1767)
The version of pcre installed on the remote host is prior to 8.21-7.9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1767 advisory. Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to...
EulerOS 2.0 SP5 : httpd (EulerOS-SA-2023-2148)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header...
Medium: pcre
Issue Overview: Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular...
CVE-2023-2186
On Triangle MicroWorks' SCADA Data Gateway version = v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string...
CVE-2023-2186
On Triangle MicroWorks' SCADA Data Gateway version = v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string...
Denial Of Services (DoS)
libming.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to an invalid memory read in the stackVal function of decompile.c, which allows an attacker to cause an application crash...