Extreme Office has a heap overflow vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A heap overflow vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Rust libsecpk crate security vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in libsecp256k1 crate before 0.3.1 for Rust, which stems from a check overflow that allows for a timed side-channel attack; an attacker could exploit this vulnerability to obtain...

Denial Of Service (DoS)

mp3gain is vulnerable to denial of service. The vulnerability exist because of a buffer overflow...

struct2json buffer overflow vulnerability

struct2json is an open source C structure and JSON fast intertransfer library , you can quickly achieve structure objects and JSON objects between serialization and deserialization requirements. A buffer overflow vulnerability exists in versions of struct2json prior to 2020-11-18. Currently there...

Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)

A buffer overflow vulnerability can be exploited by sending a parameter with size larger than can be stored in a buffer. Successful exploitation could result in execution of arbitrary code on the target system or denial of service conditions...

Contiki Buffer Overflow Vulnerability

Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. Contiki suffers from a buffer overflow vulnerability that stems from not performing integrity checks on the value of the urgent data pointer, allowing an attacker to corrupt memory ...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. There is a security vulnerability in Apple macOS and no details of the vulnerability are provided at this time...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: libX11

Issue Overview: An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to...

SUSE SLED15 / SLES15 Security Update : raptor (SUSE-SU-2020:3350-1)

This update for raptor fixes the following issues : Fixed a heap overflow vulnerability bsc1178593, CVE-2017-18926. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:2714-1)

This update for ovmf fixes the following issues : CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. Use openSUSE CA for the opensuse flavor bsc1175674 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : raptor (SUSE-SU-2020:3351-1)

This update for raptor fixes the following issues : Fixed a heap overflow vulnerability bsc1178593, CVE-2017-18926. Update raptor to version 2.0.15 - Made several fixes to Turtle / N-Triples family of parsers and serializers - Added utility functions for re-entrant sorting of objects and sequence...

MGASA-2020-0452 Updated oniguruma packages fix security vulnerability

In Oniguruma, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concatoptexactstr in src/regcomp.c CVE-2020-26159...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability. An attacker can exploit the vulnerability to execute remote code...

CVE-2020-9247

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a...

CVE-2020-9247

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a...

Moddable SDK OS Buffer Error Vulnerability

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from Moddable, USA. A buffer error vulnerability exists in versions of Moddable SDK OS prior to 200903, which stems from a heap buffer overflow in the moddable/xs/sources/xsSyntaxical.c:3562...

CVE-2020-13493

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...

CVE-2020-13494

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability...

Huawei EulerOS: Security Advisory for tmux (EulerOS-SA-2020-2493)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...