7173 matches found
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-30775)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A buffer overflow vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to perform arbitrary write operations to memory...
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-30183)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A buffer overflow vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to cause a heap buffer overflow...
Debian DLA-2169-1 : libmtp security update
libmtp is a library for communicating with MTP aware devices. The Media Transfer Protocol commonly referred to as MTP is a devised set of custom extensions to support the transfer of music files on USB digital audio players and movie files on USB portable media players. CVE-2017-9831 An integer...
RHEL 7 : kernel (RHSA-2020:1266)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1266 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: heap overflow in mwifiexupdatevsie...
OPENSUSE-SU-2020:0429-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2019-12921: Fixed an issue where text filename components potentially coulf have allowed reading of arbitrary files via TranslateTextEx boo1167208. - CVE-2020-10938: Fixed an integer overflow and resultant heap-based buffer overflow...
Laminar Research X-Plane Buffer Overflow Vulnerability
Laminar Research X-Plane is a flight simulator from the American company Laminar Research. A buffer overflow vulnerability exists in Laminar Research X-Plane version 11.41 and earlier. An attacker could exploit this vulnerability with specially crafted network packets to cause a denial of service...
OPENSUSE-SU-2020:0416-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2019-12921: Fixed an issue where text filename components potentially coulf have allowed reading of arbitrary files via TranslateTextEx boo1167208. - CVE-2020-10938: Fixed an integer overflow and resultant heap-based buffer overflow...
CVE-2020-10823
A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 1 of 3...
PT-2020-12346 · Draytek · Draytek Vigor2960 +2
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 versions prior to 1.5.1 Draytek Vigor2960 versions prior to 1.5.1 Draytek Vigor300B versions prior to 1.5.1 Description: A stack-based buffer overflow in the "/cgi-bin/activate.cgi" endpoint through the var parameter allows...
PT-2020-12351 · Draytek · Draytek Vigor2960 +2
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 versions prior to 1.5.1 Draytek Vigor2960 versions prior to 1.5.1 Draytek Vigor300B versions prior to 1.5.1 Description: A stack-based buffer overflow in cvmd allows remote attackers to achieve code execution via a remote HT...
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-40835)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to perform arbitrary read and write operations...
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-31272)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to execute arbitrary code...
Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2020-1284)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Acrobat/Reader Stack Buffer Overflow Vulnerability (CNVD-2020-18358)
Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a stack buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...
Check Point Response to CVE-2020-8597 - PPP buffer overflow vulnerability
Cause The bounds check for the rhostname was improperly constructed in the EAP request and response functions, which could allow a buffer overflow to occur. Configuring to connect to a malicious server can expose the system to this vulnerability. Symptoms - A buffer overflow flaw was found in the...
CVE-2020-6976
Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack of validation...
Brother Industries HL-L8360CDW Buffer Overflow Vulnerability
The Brother Industries HL-L8360CDW is a multifunction printer from Brother Industries of Japan. A buffer overflow vulnerability in the Brother Industries HL-L8360CDW v1.20 can be exploited by an attacker to execute arbitrary code on the device...
CVE-2019-13196
Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...
Heap overflow
Some Brother printers such as the HL-L8360CDW v1.20 were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device...
CVE-2019-13203
Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...