CVE-2021-1967

Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2021-3872

vim is vulnerable to Heap-based Buffer Overflow...

UBUNTU-CVE-2021-3872

vim is vulnerable to Heap-based Buffer Overflow...

Trend Micro Worry-Free Business Security Buffer Overflow Vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and email protection. Trend Micro Worry-Free Business Security suffers from a buffer overflow...

Buffer Overflow Vulnerability in Multiple Foxit Products

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A buffer overflow vulnerability exists in several Foxit products, which stems from a failure to properly determine memory boundaries when processing PDF files. A remote attacker could use this vulnerability to exploit specially crafted P...

Debian: Security Advisory (DLA-2783-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:3385-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2021-35942: wordexp: handle overflow in positional parameter number bsc1187911 - CVE-2021-33574: Use pthreadattrcopy in mqnotify bsc1186489...

[SECURITY] [DLA 2783-1] hiredis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2783-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 12, 2021 https://wiki.debian.org/LTS -...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. gpac suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via craft...

CVE-2020-27372

A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the runinterpreter function...

FATEK Automation WinProladder Buffer Overflow Vulnerability (CNVD-2021-83603)

FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code in the context of the current process...

多款Qualcomm产品输入验证错误漏洞

Qualcomm MSM8996AU and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The MSM8996AU is a central processing unit CPU product.QCA6574AU is a central processing unit CPU product.SD 636 is a central processing unit CPU product. Qualcomm An input validation error vulnerability exists...

The vulnerability of the real-time operating system Zephyr’s memory allocation function allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Zephyr’s real-time operating system’s memory allocation function is caused by a numerical overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

IndexPool.mint() Unchecked arithmetic can overflow that allows stealing of almost all the funds in the pool

Handle WatchPug Vulnerability details /// @dev Mints LP tokens - should be called via the router after transferring bento tokens. /// The router must ensure that sufficient LP tokens are minted by using the return value. function mintbytes calldata data public override lock returns uint256...

The vulnerability of the zsdata function in file-transfer tools such as zmodem/xmodem/ymodem Lrzsz, related to integer overflow, allows attackers to access confidential data and also cause service interruptions.

The vulnerability of the zsdata function in tools for transmitting files such as zmodem/xmodem/ymodem Lrzsz is related to incorrect length checking. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

Geutebruck instantrec Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Geutebruck instantrec Remote Command Execution', 'Description' = %q This module exploits a buffer overflow within the 'action' parameter of the...

libde265 Global Buffer Overflow Vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a global buffer overflow vulnerability in the decodeCABACbit function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

CVE-2020-21529

fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c...

CVE-2020-21531

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

Siemens SIPROTEC 5 relays buffer overflow vulnerability

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...