Important: libgsf

Issue Overview: An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library libgsf version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows fo...

Google Pixel sms_CellBroadcast.c file buffer overflow vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a buffer overflow vulnerability that stems from a lack of bounds checking in smsExtractCbLanguage in smsCellBroadcast.c, which can be exploited by an attacker to cause an out-of-bounds read...

Tenda RX9 Pro/RX9 /goform/SetVirtualServerCfg Page Buffer Overflow Vulnerability

Both the Tenda RX9 Pro and the Tenda RX9 are a wireless router from the Chinese company Tenda. The Tenda RX9 Pro and Tenda RX9 suffer from a buffer overflow vulnerability that originates from the list parameter in the sub42EA38 function on the /goform/SetVirtualServerCfg page that fails to...

Google Pixel ffu.c file integer overflow vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an integer overflow vulnerability that stems from an integer overflow in ffu.c's ffuflashpack, which can be exploited by an attacker to cause an out-of-bounds read...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in XkbSetCompatMap bsc1231565. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Mozilla Firefox and Mozilla Thunderbird Buffer Overflow Vulnerability

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is a suite of standalone Mozilla Application Suite Mozilla Thunderbird is a stand-alone e-mail client software from the Mozilla...

PT-2024-8388 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a stack overflow vulnerability in the bridge wireless main.cgi script of the NETGEAR XR300 router's firmware when handling the ssid an parameter. This can be exploited by a...

RHEL 8 : edk2 (RHSA-2024:8455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8455 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...

SUSE: Security Advisory (SUSE-SU-2024:3746-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libprotobuf-lite25_1_0 / libprotobuf-lite25_1_0-32bit / etc (SUSE-SU-2024:3747-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3747-1 advisory. - CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer bsc1230778 Tenable has extracted t...

SUSE: Security Advisory (SUSE-SU-2024:3747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3745-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3745-1 Security update for protobuf

This update for protobuf fixes the following issues: - CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer bsc1230778...

Adobe After Effects < 18.4.6 / 22.0.0 < 22.3.0 Multiple Arbitrary code execution (APSB22-19) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.4.6, 22.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-19 advisory. - Adobe After Effects versions 22.2.1 and earlier and 18.4.5 and earlier are affected by a stack overfl...

The vulnerability of the `cougar_report_fixup()` function in the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the cougarreportfixup function in the Linux operating system is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

TP-LINK TL-WDR7660 rtRuleJsonTobin Function Buffer Overflow Vulnerability

The TP-LINK TL-WDR7660 is a Gigabit router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK TL-WDR7660 version 1.0, which stems from the rtRuleJsonTobin function not checking the parameter string name when handling it, and can be exploited by a remote attacker to...

TP-LINK TL-WDR7660 wacWhitelistJsonToBin Function Buffer Overflow Vulnerability

The TP-LINK TL-WDR7660 is a Gigabit router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK TL-WDR7660 version 1.0, which originates from the wacWhitelistJsonToBin function not checking the parameter string name when handling it, and can be exploited by a remote...

TP-LINK TL-WR740N Buffer Overflow Vulnerability

The TP-LINK TL-WR740N is a wireless router from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-LINK TL-WR740N V6 version that originates from a boundary error in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm when handling untrusted input. A remote attacker could use...

D-Link DIR-619L B1 Buffer Overflow Vulnerability

The DIR-619L B1 is a home network router that provides high-speed Wi-Fi connectivity, is easy to set up and has multiple ports. A buffer overflow vulnerability exists in the D-Link DIR-619L B1. An attacker could use this vulnerability to modify the state of the program, such as by overwriting the...

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...