OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from the program's lack of proper validation of...

JerryScript Heap Buffer Overflow Vulnerability

JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in reparsecharescape in re-parser.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

UnEGG 输入验证错误漏洞

UnEGG is free and allows to decompress egg and ALZ formats and view lists. UnEGG suffers from an Input Validation Error vulnerability that stems from UnEGG v0.5 and earlier having an Integer overflow vulnerability that is triggered when a user opens a malformed specific file that UnEGG incorrectl...

SUSE: Security Advisory (SUSE-SU-2019:14117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:1904-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2021-3185: h264parser: guard against refpicmarkings overflow bsc1181255...

Cisco Webex Network Webex Player Buffer Overflow Vulnerability

Cisco Webex Network Webex Player is a player for playing video conference recordings from Cisco USA. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player, which can be exploited by an attacker to execute arbitrary code on an affected system...

华为智能手机缓冲区错误漏洞

Huawei Emui is a mobile operating system based on Android development.Huawei Magic UI is the operating system for Honor phones. A heap overflow vulnerability exists in Huawei EMUI/Magic UI, which can be exploited by an attacker to cause an anomaly in image processing...

CHIYU IoT Devices - 'Telnet' Authentication Bypass

Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, and SEMAC - all firmware...

Cesanta MJS Stack Overflow Vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A stack overflow vulnerability exists in parsearray in Cesanta MJS version 1.20.1...

Cesanta MJS stack overflow vulnerability (CNVD-2021-38647)

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for resource-constrained microcontrollers. A stack overflow vulnerability exists in parsestatementlist in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of servi...

exploit-database

This is an official repository of exploits and shellcodes, sponsored by Offensive Security. The repository contains a collection of publicly available exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. The Exploit Database is a...

CVE-2020-36367

CVE-2020-36367 describes a stack overflow in Cesanta MJS 1.20.1’s parse_block. The vulnerability allows a DoS via a crafted file, as stated across multiple sources (e.g., CNVD, NVD, Red Hat). Affected software: Cesanta MJS 1.20.1 (embedded JavaScript engine for C/C++). Underlying cause: stack ove...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsestatement in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-39531)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in movwritevideotag in libavformat/movenc.c in FFmpeg version 4.2. An attacker can exploit this vulnerabili...

fig2dev buffer overflow vulnerability (CNVD-2021-86900)

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Fig2dev version 3.2.8a, which stems from a flawed boundary check in the program's read objects function, and can be exploited by an attacker to provide crafted, malicious input that can...

Zephyr Integer Overflow Vulnerability

Zephyr is a small real-time operating system for connected, resource-constrained embedded devices. A security vulnerability exists in Zephyr versions = 1.14.2 and = 2.4.0. No details of the vulnerability are available at this time...

PT-2021-3346 · 3S Smart Software Solutions · Codesys V2 Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue is a stack-based buffer overflow in the CODESYS V2 runtime system SP. This can be exploited by a remote attacker to impact the confidentiality, integrity, and...

OPENSUSE-SU-2021:0757-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833. This update was imported from the SUSE:SLE-15:Update update project...

MGASA-2021-0216 Updated openjpeg2 packages fix a security vulnerability

There is a flaw in the opj2compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2compress, could trigger a heap out-of-bounds write due to an integer overflow, which is caused by the large number of image files. The...