ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36006)

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a string entered by the user. A...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36011)

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to the Radius configuration function failing to validate the length of a user-entered string. A remote attacker could...

SUSE-SU-2021:1097-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172...

CVE-2021-28191

ASUS BMC firmware Web management page: The firmware update function does not validate input string length, causing a buffer overflow. This can allow a remote attacker with privileged access to cause the web service to terminate abnormally. Documented in CVE-2021-28191 and corroborated by CNVD-202...

CVE-2021-28177 ASUS BMC's firmware: buffer overflow - LDAP configuration function

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

RIOT RIOT-OS 安全漏洞

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. A buffer overflow vulnerability exists in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c in RIOT version 2021.01. No detailed vulnerability details are provided a...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a string entered by the user. A...

Buffer Overflow Vulnerability in Various Esri Products (CNVD-2021-39523)

ESRI ArcGIS Enterprise and others are products of Environmental Systems Research Institute ESRI, Inc.ArcGIS Enterprise is a GIS Geographic Information System base software system.Esri Arcgis Server is a Web-oriented enterprise software platform that can be used to provide geolocation services. Es...

Integer Overflow Vulnerability in NATouch Touch Screens at Omnicom Technologies Ltd.

Nanda Aotuo Technology Jiangsu Co., Ltd. is committed to independent research, development and production of cutting-edge industrial control products with reliable performance, excellent quality and advanced technology. An integer overflow vulnerability exists in the NATouch touch screen of NATou...

Esri ArcGIS Server Buffer Overflow Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A buffer overflow vulnerability exists in Esri ArcGIS Server 10.8.1 and earlier, which can be exploited by an attacker to achieve arbitrar...

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to a count overflow vulnerability. This vulnerability allows an attacker to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Cisco IOS XE Buffer Overflow Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A buffer overflow vulnerability exists in the vDaemon process for SD-WAN on Cisco IOS XE. The vulnerability stems from insufficient boundary checking when the device processes...

Stack overflow vulnerability in the se*** interface of the Tenda 11AC 1200MBPS wireless panelized AP (CNVD-2021-25917)

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A stack overflow vulnerability exists in the se...

Buffer Overflow Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A buffer overflow vulnerability exists in the NA400PLC from Aptar Technology Corporation, which can be exploited by an attacker to cause a system crash...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2021-22152)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. A buffer overflow vulnerability exists in Adobe Photoshop. An attacker could exploit this vulnerability to execute arbitrary code...

Schneider Electric Interactive Graphical SCADA System Buffer Overflow Vulnerability (CNVD-2021-31177)

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. A buffer overflow vulnerability exists in Interactive Graphical SCADA System IGSS Definition...

The vulnerability of the Ips ECMgr process in Cisco ASR 5000 microprogramming software allows a attacker to trigger a service failure.

The vulnerability of the Ips ECMgr process in Cisco ASR 5000 microprogrammed software lies in the fact that the operation results are written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Critical Security Bug Can Knock Smart Meters Offline

Critical security vulnerabilities in Schneider Electric smart meters could allow an attacker a path to remote code execution RCE, or to reboot the meter causing a denial-of-service DoS condition on the device. Schneider Electric’s PowerLogic ION/PM smart meter product line, like other smart meter...

NETGEAR JGS516PE/GS116Ev2 Buffer Overflow Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A buffer overflow vulnerability exists in the access control section of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker can exploit this vulnerability by injecting IP addresses into a whitelist via the...