4323 matches found
Adobe InDesign 缓冲区错误漏洞
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which can be exploited by an attacker to cause a read to exceed the en...
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data outside of the buffer in memory. This allows attackers to execute arbitrary code.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code...
CVE-2021-26384
A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...
CVE-2021-26384
A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...
QEMU 安全漏洞
QEMU Quick Emulator is a set of emulation processor software from Fabrice Bellard, a French personal developer. The software is fast and cross-platform. physmem.c version 7.0.0 and below of QEMU has a denial-of-service vulnerability, which stems from the possibility of uninitialized reads of the...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A buffer error vulnerability exists in versions prior to Vim 9.0 that stems from the presence of out-of-bounds reads...
CVE-2022-22474
IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum Protect client operations. IBM X-Force ID: 225348...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...
Vim Buffer Overflow Vulnerability (CNVD-2022-68098)
Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2.4956, which stems from a boundary error in the grabfilename function when handling untrusted input. A remote attacker could exploit this vulnerability in causing out-of-bounds reads...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2.4956, which stems from a boundary error in the grabfilename function when handling untrusted input. A remote attacker could exploit this vulnerability in causing out-of-bounds reads...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A buffer error vulnerability exists in versions prior to Vim 8.2, which stems from the presence of out-of-bounds reads...
Directory traversal
The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the g GitArtifactReader.Read API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory...
CVE-2022-25856
The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the g GitArtifactReader.Read API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory...
CVE-2022-25856
The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the g GitArtifactReader.Read API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory...
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
...
CVE-2022-25856: Improper Limitation of a Pathname to a Restricted Directory
The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the g GitArtifactReader.Read API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory...
GHSA-QGRP-8F3V-Q85P `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets
FixedSizeBinaryArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code...
GHSA-H588-76VG-PRGJ `DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16...
`DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16...