376 matches found
SUSE CVE-2021-21168
Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...
USN-5845-1: OpenSSL vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this issue to read arbitrary memory contents or cause OpenSSL to crash, resulting in a denial of service. CVE-2023-0286 Octavio Galland and Marcel Böhme discovered that OpenSS...
Information Disclosure
kernel is vulnerable to Information Disclosure. A local user is able to read random memory from the kernel space due to the way a user calls DMAFROMDEVICE...
EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2022-2884)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an...
Input validation
In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these...
PT-2022-25237 · Microsoft +1 · Wmi +1
Name of the Vulnerable Software and Affected Versions: Lenovo affected versions not specified Description: The issue is related to an information leak vulnerability in the SMI Handler, which is used to configure platform settings over WMI in some Lenovo models. This vulnerability may allow an...
The vulnerability of Intel microcode in processors allows a perpetrator to gain access to confidential data and also cause system failures.
The vulnerability of Intel microcode processors involves reading data from memory buffers beyond the acceptable limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...
PT-2022-20622 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Neutralization of Null Byte, which could be exploited by a local authenticated administrator user. This exploitation could occur by sending unexpected...
Format string
The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...
The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
PT-2022-21833 · Iccc Ta · Iccc Ta
Name of the Vulnerable Software and Affected Versions: ICCC TA versions prior to SMR Aug-2022 Release 1 Description: The issue is related to an absence of variable initialization, which allows a local attacker to read uninitialized memory. Recommendations: For versions prior to SMR Aug-2022 Relea...
SUSE SLED15 / SLES15 Security Update : apache2 (SUSE-SU-2022:2302-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2302-1 advisory. - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache...
The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.
The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...
CVE-2022-25872
The CVE-2022-25872 entry concerns the npm package fast-string-search. The vulnerability is an out-of-bounds read caused by incorrect memory freeing and length calculation when the source input is not a string, allowing access to previously allocated memory. Affected component is the fast-string-s...
Design/Logic Flaw
The aprwrite function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using aprwrite or aprputs, such as with modluas r:puts function. Modules compiled and distributed separately from Apache HTTP Server that use t...
CVE-2022-28614
CVE-2022-28614 affects Apache HTTP Server 2.4.53 and earlier. The vulnerability stems from ap_rwrite() potentially reading unintended memory when reflecting very large input via ap_rwrite() or ap_rputs(), notably with mod_luas r:puts(). Modules compiled against older headers that use ap_rputs may...
The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted PDF file...
UBUNTU-CVE-2022-1437
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...
