Squirrel thread_call() Code Execution

The vulnerability of the threadcall function in the Squirrel programming language is related to the execution of operations outside of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code using a specially created malware fi...

Siemens Local Discovery Server Buffer Overflow DoS

The vulnerability of the Local Discovery Server LDS software from Siemens is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted messages...

Fujifilm PLK Monitoring Software Buffer Overflow

The vulnerability of the monitoring software for Fujifilm’s PLC models, V-Server and V-Server Lite, lies in the fact that the write operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute...

openSUSE: Security Advisory for liblouis (SUSE-SU-2022:2252-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2252-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2022-26981: fix buffer overrun in compilePassOpcode bsc1197085. - CVE-2022-31783: prevent an invalid memory write in compileRule bsc1200120...

Android read_multi_rsp Gatt SRP Privilege Escalation

The vulnerability of the readmultirsp function gattsr.cc in Android operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

MariaDB Functions Compromise Data Compromise

The vulnerability of the Exectimetracker::getloops/Filesorttracker::reportuse/filesort functions in the MariaDB database management system is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the...

ruby:2.6 security, bug fix, and enhancement update

ruby 2.6.10-109 - Upgrade to Ruby 2.6.10. Resolves: rhbz2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9...

RHEL 8 : ruby:2.6 (RHSA-2022:5338)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5338 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

Moderate: Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

NTFS File System Descriptor Code Execution

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module relates to reading and writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially crafted request...

Microsoft Office Buffer Overflow Code Execution

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created PNG file within an Office document...

lim process Qualcomm Embedded Buffer Overflow

The vulnerability of the lim process in microprogramming software in embedded Qualcomm chips is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

NVIDIA GPU Display Driver Heap Buffer Overflow DoS

The vulnerability of the NVIDIA GPU Display Driver at the ECC level is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure and compromise data integrity...

ruby:2.6 security, bug fix, and enhancement update

An update is available for rubygem-bson, rubygem-mysql2, ruby, rubygem-mongo, rubygem-pg, rubygem-abrt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is a...

RLSA-2022:5338 Moderate: ruby:2.6 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 2.6.10. BZ2089374 Security Fixes: Ruby: Buffer overrun in...

NVIDIA Jetson Cboot Module Heap Buffer Overflow DoS

The vulnerability of the Cboot module tegrablcbo.c in the NVIDIA Jetson microprogramming system driver package is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a partial service failure...

Java Runtime Environment Heap Buffer Overflow

The vulnerability of the Java Runtime Environment software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the system or disable the security controller...