WebKit Heap Buffer Overflow DoS

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

WebKit Heap Buffer Overflow DoS

The vulnerability of the WebKit rendering module is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

FreeTDS Code Execution

The vulnerability of the FreeTDS library set up on the Ubuntu operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

CVE-2019-9025

An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mbsplit function in ext/mbstring/phpmbregex.c can cause PHP to execute memcpy with a negative argument, which could read and write past buffers allocated for the data...

ChakraCore Microsoft Edge Code Execution

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

Adobe Photoshop Heap Buffer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening the malicious file...

Adobe Photoshop Heap Buffer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening the malicious file...

CVE-2020-8875

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-8875

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Media Foundation Component Data Compromise

The vulnerability of the Media Foundation component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, or accessibility of protected informati...

Intel Trace Analyzer Collector Buffer Overflow

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel Graphics Driver Heap Buffer Overflow Privilege Escalation

The vulnerability of Intel Graphics Drivers drivers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges or cause service failures...

Linux kernel ext4_xattr_set_entry Code Execution

The vulnerability of the ext4xattrsetentry function fs/ext4/xattr.c in the Linux kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2019-19945

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...

Apache Tika Heap Buffer Overflow DoS

The vulnerability of the Apache Tika content detection and analysis engine lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Windows sysmain.dll Privilege Escalation

The vulnerability of the sysmain.dll file in the Windows operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

DEM CAD/CAM/CAPP Library Heap Buffer Overflow

The vulnerability of the “adem2d.dll” library in the ADEM CAD/CAM/CAPP system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to alter the address space of the program, which may lead to the corruption of user data...

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the LibTIFF library lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted file...

Updated upx packages fix security vulnerabilities

The updated packages fix security vulnerabilities: PackLinuxElf64::unpack in plxelf.cpp in UPX 3.95 allows remote attackers to cause a denial of service double free, limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a...

LibVNCServer ultra.c Buffer Overflow Unauthorized Access

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...