Laurent Rineau CGAL 输入验证错误漏洞

Laurent Rineau CGAL is a Laurent Rineau open source application. Provides access to geometric algorithms in the form of C ++ libraries. A code execution vulnerability exists in Laurent Rineau CGAL, which can be exploited by an attacker to cause out-of-scope reads and type obfuscation via a...

Radare2 Buffer Overflow Vulnerability (CNVD-2022-81356)

Radare2 is a set of libraries and tools for working with binary files.A buffer overflow vulnerability exists in versions of Radare2 prior to 5.6.8, which stems from out-of-bounds application reads of the rbinnegetentrypoints function. An attacker could exploit this vulnerability to read sensitive...

Samsung SMR null pointer dereference vulnerability (CNVD-2022-63661)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to a null pointer dereference vulnerability that can be exploited by attackers to cause out-of-bounds reads...

多款Adobe产品缓冲区错误漏洞

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Multiple Adobe products have out-of-bounds read vulnerabilities that can be exploited by an attacker to execute arbitrary code in the...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

多款 MediaTek 产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in several MediaTek products, which stems from a lack of boundary checking in ccci, which may result in out-of-bounds reads...

Samsung SMR 代码问题漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to a null pointer dereference vulnerability that can be exploited by attackers to cause out-of-bounds reads...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

Bentley Systems MicroStation 缓冲区错误漏洞

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer error vulnerability exists in Bentley MicroStation CONNECT version 10.16.02.034, which can be exploited by an attacker to force triggered out-of-bounds reads via a 3DS fil...

Bentley Systems MicroStation 缓冲区错误漏洞

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A buffer error vulnerability exists in Bentley MicroStation CONNECT version 10.16.02.034, which can be exploited by an attacker to force triggered out-of-bounds reads via a 3DS fil...

Fuji Electric Alpha5 缓冲区错误漏洞

Fuji Electric Alpha5 is a servo amplifier from Fuji Electric, Japan. The Fuji Electric Alpha5 suffers from a buffer error vulnerability that stems from the susceptibility of affected products to out-of-bounds reads, which can lead to the disclosure of sensitive information...

The vulnerability of the PTC Axeda platform for creating and deploying corporate-level applications lies in the incorrect restriction on the path name to the restricted catalog, allowing a hacker to read arbitrary files.

The vulnerability of the PTC Axeda platform for creating and deploying corporate-level applications is related to an incorrect limitation on the path name used to access the restricted catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files by sending a...

Debian: Security Advisory (DLA-2947-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2947-1] vim security update

Debian LTS Advisory DLA-2947-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 11, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.0.0197-4+deb9u5 CVE ID : CVE-2021-3984 CVE-2021-4019 CVE-2021-4069 CVE-2021-4193 CVE-2022-0213 CVE-2022-0319...

UBUNTU-CVE-2021-3981

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in...

D-Link DAP-1620 Path Traversal Vulnerability

A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...

Sangfor VDI Client 安全漏洞

Sangfor VDI Client is a tool used by Sangfor to quickly build virtual desktops.A security vulnerability exists in Sangfor VDI Client, which can be exploited by attackers to discover the contents of username and password fields when reading process memory...

FATEK Automation FvDesigner 缓冲区错误漏洞

A buffer error vulnerability in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, stems from the fact that when handling project files, the affected product is vulnerable to out-of-bounds reads, which can be exploited to create a project file that allows arbitrary code...

Ubuntu: Security Advisory (USN-5297-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...