SAP macOS-enterprise-privileges buffer overflow vulnerability

SAP macOS-enterprise-privileges is an application from SAP Germany that provides a quick and easy way to get administrator privileges when needed. A buffer overflow vulnerability exists in SAP macOS-enterprise-privileges versions prior to 1.5.4. An attacker could exploit this vulnerability to cau...

cURL SOCKS5 Heap Overflow Vulnerability

cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...

Yifan YF325 httpd do_wds stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1765 Yifan YF325 httpd dowds stack-based buffer overflow vulnerability October 11, 2023 CVE Number CVE-2023-31272 SUMMARY A stack-based buffer overflow vulnerability exists in the httpd dowds functionality of Yifan YF325 v1.020221108. A specially crafted...

Huawei EulerOS: Security Advisory for pcre2 (EulerOS-SA-2023-2942)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to buffer overflow in the stack, allows a hacker to execute arbitrary code with privileges of the current process.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileges of the current process, using a specially crafted SPP file...

CVE-2023-44807

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function...

PT-2023-5766 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetWanSettings function via the Password parameter. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerabilit...

SUSE SLED15: libraw-devel / libraw-devel-static / libraw-tools / libraw20 / etc (SUSE-SU-2023:3968-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3968-1 advisory. - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in...

SUSE-SU-2023:3968-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

SUSE-SU-2023:3967-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. bsc1215308...

Medium: libtommath

Issue Overview: Integer Overflow vulnerability in mpgrow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service DoS. CVE-2023-36328 Affected Packages: libtommath Issue Correction: Run dnf update...

Amazon Linux 2023 : libtommath, libtommath-devel (ALAS2023-2023-370)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-370 advisory. Integer Overflow vulnerability in mpgrow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service DoS...

PT-2023-36331 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: flac versions prior to 1.4.0 Description: A Buffer Overflow issue exists in the bitwriter grow function, allowing remote attackers to execute arbitrary code through crafted input to the encoder. Recommendations: For versions prior to 1.4.0,...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2023:3820-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3820-1 advisory. - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538 Tenable has extracted the preceding...

SUSE SLES15 Security Update : busybox (SUSE-SU-2023:3819-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3819-1 advisory. - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538 Tenable has extracted the preceding description block directly from the SUS...

SUSE-SU-2023:3820-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538...

SUSE-SU-2023:3819-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538...

SUSE-SU-2023:3818-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-28429: Fixed Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c bsc1214246...

Tenda AC10 缓冲区错误漏洞

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. Tenda AC10U suffers from a stack buffer overflow vulnerability,...

PT-2023-5572 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 1.0 US AC10UV1.0RTL V15.03.06.49 multi TDE01 Description: The issue is related to multiple stack overflows in the formSetMacFilterCfg function, which can be exploited via the macFilterType and deviceList parameters. This c...