The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the ability to read data beyond the acceptable range in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to reading data beyond the permissible range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using specially created WRL files...

PT-2024-29917 · Cesanta · Cesanta Mongoose Web Server

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Web Server version 7.14 Description: The issue allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space due to an Out-of-range Pointer Offset vulnerability...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2024-2731)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the `of_irq_parse_one()` function in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the ofirqparseone function in the Linux operating system is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

CVE-2024-27860

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory...

CVE-2024-34630

Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2023-31355

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest...

CVE-2023-31355

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest...

CVE-2023-31355

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest...

CVE-2023-31355

CVE-2023-31355 is associated with SNP firmware write restrictions; a malicious hypervisor could overwrite a guest’s UMC seed and potentially read memory from a decommissioned guest. Connected advisories (Fedora Linux-firmware updates around 2025-03-11) provide concrete remediation: update linux-f...

Mozilla Firefox post-release reuse vulnerability (CNVD-2024-29333)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A post-release reuse vulnerability exists in versions prior to Mozilla Firefox 127, which can be exploited by an attacker to read memory in the JavaScript string portion of the heap...

CVE-2024-5694

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox 127...

RHEL 7 : c-ares (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - c-ares: Single byte out of buffer write CVE-2016-5180 - The c-ares function aresparsenaptrreply, which is...

The vulnerability of the sch_fragment() function in the net/sched/sch_frag.c module of the net/sched component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the schfragment function in the net/sched/schfrag.c module of the net/sched component of the Linux operating system is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

RHEL 6 : c-ares (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - c-ares: Single byte out of buffer write CVE-2016-5180 - The c-ares function aresparsenaptrreply, which is...

RHEL 7 : c-ares (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - c-ares: Single byte out of buffer write CVE-2016-5180 - The c-ares function aresparsenaptrreply, which is...

The vulnerability of the Microsoft ODBC Driver for SQL Server’s dynamic layout library, related to reading data beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC Driver for SQL Server dynamic loading library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

The vulnerability of the Font component (the default font used by Microsoft Edge and Google Chrome browsers) allows a perpetrator to gain access to potentially confidential information.

The vulnerability of the Font component the default font used by Microsoft Edge and Google Chrome browsers is related to memory-related reading operations. Exploiting this vulnerability can allow an attacker to gain access to potentially confidential information from a remote location...