5406 matches found
CVE-2021-20166
Netgear RAX43 firmware 1.0.3.96 is affected by a buffer overrun in the cgi-bin URL parsing endpoint (CVE-2021-20166). Nuclei templates also describe a related issue: command injection/authentication bypass in readycloud_control.cgi’s name parameter, and note that this vulnerability combines CVE-2...
CVE-2021-20166
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Valu...
EulerOS 2.0 SP9 : shim (EulerOS-SA-2021-2927)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field...
EulerOS Virtualization 3.0.2.0 : openssl (EulerOS-SA-2021-2828)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string da...
The vulnerability of the Adobe Photoshop graphic editor relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory when processing PSD files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious PSD file...
The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing M4A files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing WAV files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Dimension’s 3D design software lies in its inability to handle data writing beyond the buffer limit, allowing attackers to execute arbitrary code.
The vulnerability of Adobe Dimension’s 3D design software relates to the issue of data writing beyond the buffer during the processing of GIF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the operation beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability of the professional video editing software Adobe Premiere Pro lies in the fact that operations may go beyond the buffer limits in memory during the syntax analysis of 3GP files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created...
The vulnerability of the Adobe Photoshop graphic editor, related to data writing beyond the buffer, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer during the processing of PSD files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious PSD file...
The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe Premiere Rush is related to the execution of operations beyond the buffer in memory when processing MXF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing EPS/TIFF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Oracle Linux 8 : openssl (ELSA-2021-9632)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9632 advisory. - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings Tenable has extracted the preceding description block directly from the Oracle Linux...
MGASA-2021-0579 Updated ruby packages fix security vulnerability
Bundler sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application...
The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the VIRTIOGPUCMDGETCAPSET command in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the UAS emulation device’s hardware emulation by QEMU, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the UAS emulation device’s hardware emulation software, QEMU, lies in the lack of flow number verification. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and even cause service failures...
Oracle Linux 8 : openssl (ELSA-2021-5226)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-5226 advisory. - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings Tenable has extracted the preceding description block directly from the Oracle Linux...
The vulnerability of the ImageIO component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of the ImageIO component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to data writing beyond the buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and execute arbitrary code using a...
The vulnerability of the Media Framework component in Android operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Media Framework component in Android operating systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the vorbis_book_decodev_set() function implementation in the Media Framework of Android components allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability of the vorbisbookdecodevset function implementation in the Media Framework of Android systems stems from the possibility of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or...