EulerOS 2.0 SP9 : python-cryptography (EulerOS-SA-2021-2278)

According to the version of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could...

CVE-2021-38195

An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow...

FATEK Automation FvDesigner Buffer Overflow Vulnerability

FATEK Automation FvDesigner is a human-computer interaction device from FATEK Automation. A buffer overflow vulnerability exists in FATEK Automation FvDesigner versions 1.5.88 and earlier, which can be exploited by an attacker to create a special project file that allows arbitrary code execution...

CVE-2021-37164

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a...

OSV-2021-1084 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36738 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

Huawei Smartphone 缓冲区错误漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a stack overflow vulnerability that can be exploited by attackers to cause a system reset...

SUSE SLES11 Security Update : libsndfile (SUSE-SU-2021:14769-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:14769-1 advisory. - CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcmdecodeblock. bsc1188540 Tenable has extracted the preceding descripti...

Apple iPadOS 缓冲区错误漏洞

Apple iPadOS is a set of operating systems from Apple Inc. for the iPad tablet computer. A buffer error vulnerability exists in Apple iPadOS that could allow an application to execute arbitrary code with kernel privileges. The affected products and versions are as follows:Apple iPadOS 11.5.1, iOS...

CVE-2020-22283

A buffer overflow vulnerability in the icmp6sendresponsewithaddrsandnetif function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet...

CVE-2020-19497

Integer overflow vulnerability in MatVarReadNextInfo5 in mat5.c in tbeu matio aka MAT File I/O Library 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts...

CVE-2020-19497

Integer overflow vulnerability in MatVarReadNextInfo5 in mat5.c in tbeu matio aka MAT File I/O Library 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts...

PYSEC-2021-888

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4getatt called from nc4getatttc and ncgetatttext and in uffdcleanup called from netCDFDataset::netCDFDataset and netCDFDataset::netCDFDataset...

MAT File I/O Library 缓冲区错误漏洞

MAT File I/O Library matio is an open source, C language library for reading and writing binary MATLAB MAT files. A security vulnerability exists in MAT File I/O Library that stems from having a heap-based buffer overflow...

Integer overflow

Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as we...

D-Link DAP-1330 Buffer Overflow Vulnerability

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. The D-Link DAP-1330 suffers from a buffer error vulnerability that arises from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker could exploit...

Fortinet FortiMail Buffer Overflow Vulnerability

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. A buffer overflow vulnerability exists in Fortinet FortiMail, which stems from a buffer size miscalculation in multiple instances. An...

SonicWall Switch Buffer Overflow Vulnerability

SonicWall Switch is a network device. A switch. A buffer overflow vulnerability exists in SonicWall Switch versions prior to 1.1.0.0-11s, which can be exploited by remote attackers to access potentially sensitive information or perform a denial of service DoS attack...

OPENSUSE-SU-2021:1651-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833...

UVI-2021-1001120 net: qed: Fix memcpy() overflow of qed_dcbx_params()

net: qed: Fix memcpy overflow of qeddcbxparams This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.129 by commit...

The vulnerability of the SubstituteString() function in the MagickCore/string.c component of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by exploiting integer overflow.

The vulnerability of the SubstituteString function in the MagickCore/string.c component of the ImageMagick console graphics editor is related to the lack of checking for the replaceextent parameter when it takes a zero value. Exploiting this vulnerability allows an attacker to cause a service...