PT-2020-22109

Name of the Vulnerable Software and Affected Versions simdjson affected versions not specified Description The issue is related to a stack-buffer-overflow read, which occurs in the simdjson::internal::decimal right shift function. This function is part of the simdjson library, specifically within...

simdjson:fuzz_dump: Stack-buffer-overflow in simdjson::internal::decimal_right_shift

Project: https://github.com/simdjson/simdjson.git https://github.com/lemire/simdjson.git Detailed Report: https://oss-fuzz.com/testcase?key=5087581219586048 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasansimdjson Platform Id: linux Crash Type:...

exprtk:exprtk_fuzzer: Stack-buffer-overflow in exprtk::parser<double>::expression_generator<double>::synthesize_csocs_expressio

Project: https://github.com/ArashPartow/exprtk.git Detailed Report: https://oss-fuzz.com/testcase?key=5975620905074688 Project: exprtk Fuzzing Engine: libFuzzer Fuzz Target: exprtkfuzzer Job Type: libfuzzerasanexprtk Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

exprtk:exprtk_fuzzer: Stack-buffer-overflow in exprtk::lexer::generator::scan_string

Project: https://github.com/ArashPartow/exprtk.git Detailed Report: https://oss-fuzz.com/testcase?key=5190826931781632 Project: exprtk Fuzzing Engine: libFuzzer Fuzz Target: exprtkfuzzer Job Type: libfuzzerasanexprtk Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

Amazon Linux 2 : tigervnc (ALAS-2020-1552)

The version of tigervnc installed on the remote host is prior to 1.8.0-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1552 advisory. TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack...

Stack overflow

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114...

CVE-2020-12830

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114...

CVE-2020-12830

The CVE-2020-12830 entry concerns Western Digital My Cloud devices and the vulnerability is a stack buffer overflow in unspecified components that could allow an attacker to escalate privileges via unauthorized remote code execution. Affected software is My Cloud firmware prior to version 5.04.11...

CVE-2020-12830: Out-of-bounds Write

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114...

Eaton HMiSoft Stack Buffer Overflow (CVE-2020-10639)

A stack buffer overflow vulnerability exists in Eaton HMiSoft. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

Scientific Linux Security Update : cups on SL7.x x86_64 (20201001)

Security Fixes : - cups: DNS rebinding attacks via incorrect whitelist CVE-2017-18190 - cups: stack-buffer-overflow in libcups's asn1gettype function CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1getpacked function CVE-2019-8696 C Tenable Network Security, Inc. The descriptive text...

cups security update

CentOS Errata and Security Advisory CESA-2020:3864 An update for cups is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : cups (RHSA-2020:3864)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3864 advisory. - A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP...

Microsoft Office Word 2003+2007+2010 Universal 0day Exploit

This module targets Office 2003 no-SP/SP1/SP2/SP3 + 2007 no-SP/SP/SP2/SP3 + Office 2010 no-SP/SP1 versions. This module exploits a stack buffer overflow in SCOMCTL.OCX. It uses a malicious RTF to embed the specially crafted MSComctlLib.ListViewCtrl.2 Control as exploited in the wild on April 2012...

CVE-2020-1664

A stack buffer overflow vulnerability in the device control daemon DCD on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service DoS against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17....

Stack overflow

A stack buffer overflow vulnerability in the device control daemon DCD on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service DoS against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17....

CVE-2020-1664

CVE-2020-1664 documents a stack buffer overflow in Juniper Networks Junos OS device control daemon (DCD). The issue allows a low-privilege local user to cause a DoS or execute arbitrary code with root privileges. Affected products include Junos OS versions listed in the CVE (e.g., 17.3 through 20...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Stack-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5721057325219840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

Fix of 227 CVE

Fix bug 69720: Null pointer dereference in phargetfpoffset - Fix bug 70728: Type Confusion Vulnerability in PHPtoXMLRPCworker - Fix bug 70661: Use After Free Vulnerability in WDDX Packet Deserialization - Fix bug 70741: Session WDDX Packet Deserialization Type Confusion Vulnerability - Fix bug...

PT-2020-5147

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S12, 17.4R3-S3 Junos OS versions prior to 18.1R3-S11 Junos OS versions prior to 18.2R3-S6 Junos OS versions prior to 18.2X75-D53, 18.2X75-D65 Junos OS versions prior to...