Siemens Opcenter RDL Buffer Overflow Vulnerability

The Opcenter Research Development & Laboratory RD&L suite of software products simplifies, optimizes and aligns formulation product development, improves FMCG innovation efficiency and optimizes FMCG data management. A buffer overflow vulnerability exists in Siemens Opcenter RDL, which can be...

Siemens User Management Component

SUMMARY Siemens User Management Component UMC is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions...

CVE-2024-52061

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries, Queuing Service, Recording Service, Routing Service allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before...

TOTOLINK EX1800T cstecgi.cgi sub_40662C stack overflow vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T cstecgi.cgi sub40662C suffers from a stack overflow vulnerability that originates from the failure of the ssid parameter of the sub40662C function of the /cgi-bin/cstecgi.cgi file to...

CVE-2024-47606

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

CVE-2024-47537

A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...

CVE-2024-47538 GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

The vulnerability of the virtio component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the virtio component in the Linux operating system is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-52983

Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52983

Adobe Animate is affected by an Integer Overflow or Wraparound vulnerability (CVE-2024-52983) in versions 23.0.8, 24.0.5 and earlier, enabling arbitrary code execution in the context of the current user when a malicious file is opened. The issue requires user interaction and is documented alongsi...

CVE-2024-54094

Solid Edge SE2024 (all versions earlier than V224.0 Update 5) is affected by a heap-based buffer overflow during parsing of specially crafted PAR files. The flaw can allow code execution in the context of the current process. Affected product: Siemens Solid Edge SE2024; vulnerable component: PAR ...

Adobe Premiere Pro < 24.6.4 / 25.0 < 25.1 Arbitrary code execution (APSB24-104)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 24.6.4, 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-104 advisory. - Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

OPENSUSE-SU-2024:0396-1 Security update for radare2

This update for radare2 fixes the following issues: Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parsedie function boo1234065. - For more details, check full release notes:...

CVE-2024-48871 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution...

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-48211)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that stems from susceptibility to an out-of-bounds read vulnerability that could lead to sensitive memory disclosure. An attacker can...

SUSE CVE-2010-4228

Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of service abend via a long DELE command, a different vulnerability than CVE-2010-0625.4...

CVE-2024-30962

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...

curl: Buffer Overflow Vulnerability in strcpy() Leading to Remote Code Execution

Summary: The vulnerability in the program arises from a classic buffer overflow, triggered by the unsafe use of the strcpy function without bounds checking. The program copies data from a source buffer to a destination buffer, allowing attackers to overflow the buffer if the input string exceeds...

D-Link DIR-605L Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from D-Link that supports a variety of network connections and security settings. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates in the file /goform/formResetStatistic parameter curTime, no details of the vulnerability are...

SUSE CVE-2024-53849

editorconfig-core-c is theEditorConfig core library written in C for use by plugins supporting EditorConfig parsing. In affected versions several overflows may occur in switch case '' when the input pattern contains many escaped characters. The added backslashes leave too little space in the outp...