Denial of Service Vulnerability in GX Works2 (CNVD-2021-16895)

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

Memory Out-of-Bounds Access Vulnerability in GX Works2

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

Rust Information Disclosure Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An information disclosure vulnerability exists in versions of Rust prior to 0.1.3, which can be exploited to obtain sensitive information via a memory location that is never initialized by IoReader :: read...

The vulnerability of the Payments component in the Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the Payments component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the DevTools set of tools in the Google Chrome web browser allows a hacker to escape from the isolated software environment.

The vulnerability of the DevTools set of tools in the Google Chrome web browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to exit from a isolated software environment...

The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2020-13548

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting...

Information disclosure

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

CVE-2021-23878 Clear text storage of sensitive Information in ENS

Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To...

Prusa Research PrusaSlicer Buffer Error Vulnerability

A buffer error vulnerability exists in Prusa Research PrusaSlicer that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory locatio...

CVE-2021-26953

The CVE-2021-26953 issue affects the Rust crate postscript, prior to version 0.14.0. Affected functionality passes an uninitialized buffer to a user-provided Read implementation, allowing potential information disclosure from uninitialized memory. The underlying cause is exposing an uninitialized...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that allows data to be written beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the execution of operations beyond the buffer in memory. Exploiting these...

The vulnerability of the Cisco SD-WAN vEdge tunnel forwarding function in microprogramming-based routers of Cisco SD-WAN vEdge allows a attacker to cause a service failure.

The vulnerability of the Cisco SD-WAN vEdge micro-programming software’s VPN tunneling function is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2020-36151

CVE-2020-36151 affects libmysofa (versions 0.5–1.1). The root cause is incorrect handling of input data in mysofa_resampler_reset_mem, leading to a heap buffer overflow that can overwrite large blocks of memory. Connected advisories confirm fixes in libmysofa 0.9.1 via openSUSE/SUSE security upda...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Blackbeam Rust-marc 安全漏洞

Blackbeam Rust-marc is a codebase for the Rust language from Blackbeam's individual developers to interact with mrc format files. A security vulnerability exists in Blackbeam Rust-marc versions prior to 2.0.0, which stems from a user-supplied read implementation that can access the old contents o...

CVE-2021-25905

An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory...

RUSTSEC-2021-0152 `out_reference::Out::from_raw` should be `unsafe`

Out::fromraw in affected versions allows writing a value to invalid memory address without requiring unsafe. The soundness issue has been addressed by making Out::fromraw an unsafe function...