VulnCheck KEV: CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...

Windows Support Diagnostic Tool Code Execution

The vulnerability of the Windows operating system’s Support Diagnostic Tool MSDT arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Intel Wireless Bluetooth Driver Buffer Overflow Privilege Escalation

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

UEFI Buffer Overflow

The vulnerability of UEFI BIOS in desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Intel Wireless Bluetooth Driver Buffer Overflow

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

Hewlett-Packard SMM Driver Privilege Escalation

The vulnerability of the System Management Mode SMM driver in microprogramming-based EFI BIOS desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerabilit...

Samba SMB1 DoS

The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the fact that the operation values are written outside the buffer in memory during the range checking process. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

web interface for managing Code Execution

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV110W, RV130, RV130W, and RV215W routers stems from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

EcoStruxure Control Expert Buffer Overflow DoS

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Microsoft Edge Heap Buffer Overflow RCE

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OESA-2022-1817 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue ...

Mozilla Firefox Heap Buffer Overflow DoS

The vulnerability of the Mozilla Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

CVE-2022-35928 AES Crypt for Linux Password Security Vulnerability

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

CVE-2022-35928: Buffer Copy without Checking Size of Input

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

CDRRip.dll Heap Buffer Overflow Code Execution

The vulnerability of the CDRRip.dll library in the Corel PhotoPaint Standard graphic design and photo editing software is related to reading data outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, usin...

Intel NUC Buffer Overflow DoS

The vulnerability in Intel NUC’s built-in software arises from an operation that occurs outside the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Siemens SIMATIC S7-400 Buffer Overflow

The vulnerability of microprogrammed software in Siemens SIMATIC S7-400 and SIMATIC S7-410 programmable logic controllers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause malfunctions by sending special...

qemu security update

15:4.2.1-18.el7 - block: introduce maxhwiov for use in scsi-generic Paolo Bonzini Orabug: 33785156 - file-posix: try BLKSECTGET on block devices too, do not round to power of 2 Paolo Bonzini Orabug: 33785156 - block: add maxhwtransfer to BlockLimits Paolo Bonzini Orabug: 33785156 - block-backend:...

CVE-2022-33881

Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...