CVE-2022-30926

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm...

CVE-2022-30923

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AspSetTimingtimeWifiAndLed parameter at /goform/aspForm...

CVE-2022-30921

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm...

CVE-2022-30920

CVE-2022-30920 affects H3C Magic R100 / R100V100R005. The issue is a stack overflow originating from the Edit_BasicSSID parameter on the /goform/aspForm page, as described in multiple sources. The CVSS data indicates a network-exposed, high-severity vulnerability with no user interaction required...

CVE-2022-30915

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm...

CVE-2022-30914

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

...

Qualcomm 芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. Qualcomm has an input validation error vulnerability that stems from an intege...

PT-2022-6998 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.97.1 Exim versions 4.94.2-7+deb11u1 through 4.96-15+deb12u2 Exim versions prior to 4.92-8+deb10u8 Exim versions prior to 4.96.1-1.1 Description: Exim is vulnerable to multiple issues, including a stack-based buffer...

uint120 overflow for partially fillable orders in OrderValidator.sol

Lines of code Vulnerability details Repo commit referenced: 49799ce156d979132c9924a739ae45a38b39ecdd Impact In the lines OrderValidator.solL223-L239 where the orderStatus for an orderHash gets updated: orderStatusorderHash.numerator = uint120 filledNumerator + numerator ;...

CVE-2022-32200

libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarfutil.c...

The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the visual analysis tool IBM i2 Analyst’s Notebook relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

balanceAtEpochOf will revert

Lines of code Vulnerability details Impact The line for uint256 i = locks.length - 1; i + 1 != 0; i-- relies on uint256 underflow and overflow, which would revert in solidity ^0.8.0 Proof of Concept function balanceAtEpochOfuint256 epoch, address user public view returns uint256 amount...

OPENSUSE-SU-2022:10002-1 Security update for librecad

This update for librecad fixes the following issues: - CVE-2021-45341: Fixed a buffer overflow vulnerability in LibreCAD allows an attacker to achieve remote code execution via a crafted JWW document boo1195105 - CVE-2021-45342: Fixed a buffer overflow vulnerability in jwwlib in LibreCAD allows a...

PT-2022-4903 · NetGear · Netgear N300

Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router version 1.0.0.70 Description: The issue is related to a stack overflow via strcpy in uhttpd, which can lead to a buffer overflow when processing configuration files in the uHTTPd web server. This can potentially...

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE-based Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers allows a attacker to cause service interruptions.

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco IOS XE Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to...

CVE-2022-30472

Tenda AC Seris Router AC18V15.03.05.196318 has a stack-based buffer overflow vulnerability in function fromAddressNat...

The vulnerability of the DirectX11 user-mode driver of the NVIDIA GPU Display Driver allows a hacker to execute arbitrary code.

The vulnerability of the DirectX11 graphics driver for NVIDIA GPU Display Driver lies in its ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by injecting a specially crafted shader...

OPENSUSE-SU-2022:0143-1 Security update for librecad

This update for librecad fixes the following issues: - CVE-2021-45341: Fixed a buffer overflow vulnerability in LibreCAD that allowed an attacker to achieve remote code execution via a crafted JWW document boo1195105 - CVE-2021-45342: Fixed a buffer overflow vulnerability in jwwlib in LibreCAD...

Apple macos buffer overflow vulnerability (CNVD-2024-17858)

Apple macos is a set of operating systems from the American company Apple. Apple macos suffers from a buffer overflow vulnerability that originates from a boundary error in the Wi-Fi component when handling untrusted input. An attacker could exploit the vulnerability to access sensitive informati...