5398 matches found
CVE-2023-24288
A crafted save file can cause a buffer overrun in Simon Tatham's Portable Puzzle Collection...
CVE-2023-24284
A crafted save file can cause a buffer overrun in the Guess puzzle...
CVE-2023-24285
A crafted save file can cause a buffer overrun in the Netslide puzzle...
CVE-2023-24283
A crafted save file can cause a buffer overrun in the Guess puzzle...
SUSE-SU-2023:3964-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of...
Important: kernel
Issue Overview: A use-after-free flaw was found in btrfssearchslot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea CVE-2023-1611 A flaw in the Linux Kernel found in the GFS2 file system. On corrupted gfs...
The vulnerability of OPTEE, a microprogramming software component for MediaTek chips, allows attackers to enhance their privileges.
The vulnerability of OPTEE microprogramming software components in MediaTek’s chips relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Exim SMTP mail server allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Exim mail server’s SMTP service is related to the issue of operations going beyond the buffer in memory when implementing a DNSDB-style search mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...
The vulnerability of the SMTP protocol implementation in a mail server allows a hacker to execute arbitrary code.
The vulnerability of the SMTP protocol implementation in email servers is related to the execution of operations beyond the buffer boundaries in memory when processing requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the formSetMacFilterCfg function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetMacFilterCfg function in the Tenda AC10U router software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the formSetWanL2TP function in the microprogramming software for D-Link DIR-619L routers allows a hacker to induce a service failure.
The vulnerability of the formSetWanL2TP function in the microprogramming software for D-Link DIR-619L routers is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of WLAN micro-programming software from MediaTek allows attackers to enhance their privileges.
The vulnerability of the WLAN microprogramming software solution from MediaTek arises from the execution of operations beyond the buffer boundaries in memory, due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
ABB RTU500 Series Out-of-bounds Read in embedded OpenSSL (CVE-2021-3712)
A vulnerability exists in the OpenSSL Version 1.0.2 that affects the RTU500 Series product versions listed below. RTU500 series CMU Firmware versions 12.0.1 â 12.0.14 12.2.1 â 12.2.11 12.4.1 â 12.4.11 12.6.1 â 12.6.8 12.7.1 â 12.7.5 13.2.1 â 13.2.5 13.3.1 â 13.3.3 13.4.1 ASN.1 strin...
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory when processing XML data. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the SetAPLanSettings() function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a hacker to execute arbitrary code.
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory when processing XML data. Exploiting this vulnerability allows a remote attacker to execute...
Medium: ruby
Issue Overview: A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read. CVE-2022-28739 Affected...
Important: kernel
Issue Overview: A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nftablesapi.c. Mishandled error handling with NFTMSGNEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw...
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system is related to the issue where operations are performed outside the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to compromise the...
The vulnerability of the tiffcrop utility in the LibTIFF library, which allows a hacker to cause a service failure.
The vulnerability of the tiffcrop utility in the LibTIFF library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the dir_setWanWifi function in D-Link DIR-816 A2 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dirsetWanWifi function in D-Link DIR-816 A2 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...