CVE-2017-17772

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation...

CVE-2017-17772 Multiple buffer overread vulnerabilities in WLAN

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation...

PT-2024-10594 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves out-of-bounds reads in multiple functions that process 802.11 frames, resulting from insufficient validation. Recommendations: At the...

SUSE CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

PT-2024-16562 · WordPress · Mp3 Sticky Player

Name of the Vulnerable Software and Affected Versions: MP3 Sticky Player plugin for WordPress versions up to, and including, 8.0 Description: The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal via the content/downloader.php file. This makes it possible for...

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from an AcroForm annotation containing an out-of-bounds read issue. An attacker exploiting this...

Kofax Power PDF 缓冲区错误漏洞

Kofax Power PDF is a professional PDF editing and management software from Kofax Corporation. Kofax Power PDF suffers from a buffer error vulnerability that stems from improper validation of user-supplied data, resulting in out-of-bounds reads during the parsing of JP2 files, potentially allowing...

CVE-2024-50179

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

DEBIAN-CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

Adobe Audition Buffer Overflow Vulnerability (CNVD-2024-46402)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product mainly uses a comprehensive toolset that includes multi-track, waveform and spectral display to mix, edit and create audio content. Adobe Audition suffers from a buffer overflow vulnerability...

SUSE CVE-2024-50290

In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing out-of-bounds memory reads. No details of the vulnerability are provided at this time...

UBUNTU-CVE-2023-39179

A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

FreeBSD : mongodb -- Buffer over-reads in MongoDB Server (28ffa931-a510-11ef-8109-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 28ffa931-a510-11ef-8109-b42e991fc52e advisory. [email protected] reports: An authorized user may trigger crashes or receive the contents of buffer...

D-Link DSL6740C Path Traversal Vulnerability

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file. An attacker could exploit this vulnerability to cau...

CVE-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

CVE-2024-10921

CVE-2024-10921 affects MongoDB Server: v5.0 prior to 5.0.30; v6.0 prior to 6.0.19; v7.0 prior to 7.0.15; and v8.0 prior to and including 8.0.2. The vulnerability arises from improper handling of BSON, allowing an authorized network user to trigger crashes or read buffer contents via specially cra...

CVE-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

mongodb -- Buffer over-reads in MongoDB Server

[email protected] reports: An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server...