CVE-2022-47386

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

CVE-2024-56444

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

The vulnerability of the Network Stack module in Qualcomm’s embedded software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Network Stack module in Qualcomm’s embedded software lies in the copying of buffers without checking the size of the input data during the processing of IPA structures. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

Redis Stack Lua Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis Stack. Authentication is required to exploit this vulnerability. The specific flaw exists within the Lua module. The issue results from the lack of validating the existence of an object prior t...

CVE-2024-56443

CVE-2024-56443 describes a cross-process screen stack vulnerability in Huawei HarmonyOS UIExtension module. The available documents identify the affected component as the UIExtension module and indicate impact to service confidentiality if exploited. The CVSS data shows high confidentiality impac...

CVE-2024-56443

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-56436

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS UIExtension Module Cross-Process Screen Stack Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the Huawei HarmonyOS UIExtension module, which can be exploited by attackers to compromise confidentiality...

CVE-2024-54119

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54117

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-54110

CVE-2024-54110 describes a cross-process screen stack vulnerability in Huawei HarmonyOS’s UIExtension module. Available documents indicate potential confidentiality impact, but do not specify affected versions, root cause details, exploit status, or a fix. Monitor Huawei security bulletins for re...

CVE-2024-54104

Huawei HarmonyOS UIExtension cross-process page/screen stacking vulnerability affects the UIExtension module, with potential confidentiality impact. Root cause described as cross-process stacking, but explicit exploit details, affected versions, and a patch/fix are not provided across the connect...

GStreamer 安全漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A security vulnerability exists in GStreamer that stems from an uninitialized stack variable vulnerability found in the gstmatroskademuxaddwvpkheader function in matroska-demux.c. The vulnerability is...

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 go/parser: golang: Calling any of the...

The vulnerability of the H5E_printf_stack() function in the H5Eint.c file of the HDF5 library allows a attacker to disclose protected information.

The vulnerability of the H5Eprintfstack function in the H5Eint.c file of the HDF5 library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this function...

KB5043083: Windows 10 LTS 1507 Security Update (September 2024)

The remote Windows host is missing security update 5043083. It is, therefore, affected by multiple vulnerabilities - Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 initial...

The vulnerability of Xerox WorkCentre 7220 microprogrammed software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Xerox WorkCentre 7220 microprogrammed software is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

CVE-2024-6874 macidn punycode buffer overread

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message

A vulnerability has been identified in the NetworkPkg IP stack of EDK2, the open-source reference implementation of the UEFI specification. This flaw enables an unauthenticated attacker within the same network vicinity to transmit a specifically crafted DHCPv6 message. Exploiting this vulnerabili...

The vulnerability of the System Recovery Bootloader for Windows operating systems allows a hacker to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the System Recovery Bootloader for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions and execute arbitrary code...