9305 matches found
The vulnerability of the Bluetooth technology implementation in Android devices based on MediaTek MT8167, MT8175, and MT8183 chips allows attackers to gain increased privileges.
The vulnerability of the Bluetooth technology implementation in Android devices based on MediaTek MT8167, MT8175, and MT8183 operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
PT-2023-5508 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the target must...
PT-2023-5494 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the target must...
PT-2023-24672 · Unknown · Contiki-Ng
Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.9 Description: The issue arises when the Contiki-NG OS processes ICMP DAO packets in the dao input storing function without verifying that the packet buffer is sufficiently large, leading to potential...
The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to access control deficiencies, allows a intruder to gain access to confidential data.
The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to reading data from buffers beyond the allowed limits. Exploiting this vulnerability allows a malicious actor to gai...
The vulnerability of the ntfs_set_ea() function in the fs/ntfs3/xattr.c driver of the Linux file system kernel allows a attacker to gain access to protected information or cause service failure.
The vulnerability of the ntfssetea function in the fs/ntfs3/xattr.c driver of the Linux file system is related to reading data beyond the allocated buffer, due to an incorrect definition of its boundaries. Exploiting this vulnerability can allow an attacker to access protected information or caus...
OESA-2023-1326 hdf5 security update
HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...
OESA-2023-1325 hdf5 security update
HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...
SUSE CVE-2023-2977
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...
AZL-35073 CVE-2023-2977 affecting package opensc for versions less than 0.22.0-3
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...
CVE-2023-33285
...
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software, related to reading data beyond the buffer in memory, allows a attacker to execute arbitrary code.
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by having the user open a specially...
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software, related to reading beyond the buffer in memory, allows a attacker to execute arbitrary code.
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software lies in reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by having the user open a specially created FNP file...
The vulnerability of the IOSurface component in MacOS operating systems allows attackers to disclose protected information.
The vulnerability of the IOSurface component in MacOS operating systems relates to reading data beyond the buffer boundaries within IOSurface. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, tvOS, and the Safari browser allows attackers to disclose protected information.
The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, tvOS, and the Safari browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a...
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software arises from reading beyond the buffer in the FontManager system’s control module. This allows an attacker to execute arbitrary code.
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software arises from reading data beyond the buffer boundaries in the FontManager system’s memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by having the us...
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software arises from reading beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Horner Automation Cscape EnvisionRV remote control access software and the Cscape software arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by having the user open a specially created CS...
The vulnerability in the RLBox Expat browser driver for Firefox and Firefox ESR allows a malicious actor to trigger an unexpected termination of the application.
The vulnerability of the RLBox Expat browser drivers for Firefox and Firefox ESR involves reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause an unexpected termination of the application through a specially created website...
