11590 matches found
CVE-2021-42529: Stack-based Buffer Overflow
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2021-42532: Stack-based Buffer Overflow
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2021-42531: Stack-based Buffer Overflow
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2021-42530: Stack-based Buffer Overflow
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
IBM Java 7.1 < 7.1.4.80 / 8.0 < 8.0.6.25 / 11.0 < 11.0.10.0
The version of IBM Java installed on the remote host is prior to 7.1 7.1.4.80 / 8.0 8.0.6.25 / 11.0 11.0.10.0. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update February 2021 advisory. - In Eclipse OpenJ9 up to and including version 0.23, there is potential fo...
SUSE SLES12 Security Update : cifs-utils (SUSE-SU-2022:1429-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1429-1 advisory. - CVE-2022-27239: Fixed a buffer overflow in the command line ip option bsc1197216. Tenable has extracted the preceding description block...
SUSE SLED15 / SLES15 Security Update : cifs-utils (SUSE-SU-2022:1430-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1430-1 advisory. - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could...
CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...
CVE-2021-34587: Stack-based Buffer Overflow
In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...
PT-2022-3554 · Unknown +5 · Cifs-Utils +5
Name of the Vulnerable Software and Affected Versions: cifs-utils versions through 6.14 Description: The issue is related to a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument, which could allow local attackers to gain root privileges. This is a result of a buffer...
Ubuntu 22.04 LTS : FriBidi vulnerabilities (USN-5366-2)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5366-2 advisory. USN-5366-1 fixed several vulnerabilities in FriBidi. This update provides the corresponding updates for Ubuntu 22.04 LTS. Tenable has extracted the...
CVE-2022-27239: Out-of-bounds Write
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...
Buffer Over-read
Description Stack-based Buffer Overflow at index.c:991 Build git clone https://github.com/bfabiszewski/libmobi.git cd libmobi export CFLAGS="-g -O0 -lpthread -fsanitize=address" export CXXFLAGS="-g -O0 -lpthread -fsanitize=address" export LDFLAGS="-fsanitize=address" ./autogen.sh ./configure...
Netatalk < 3.1.13 Multiple Vulnerabilities
Netatalk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netatalk:netatalk"; ifdescription...
EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1591)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0213 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0261...
EulerOS 2.0 SP8 : openjpeg (EulerOS-SA-2022-1576)
According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an...
openSUSE: Security Advisory for nbd (SUSE-SU-2022:1276-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security Bulletin: App Connect Professional is affected by GNU C Library vulnerability
Summary App Connect Professional have addressed the following vulnerability reported in GNU C Library. Vulnerability Details CVEID: CVE-2022-23219 DESCRIPTION: GNU C Library aka glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the clntcreate function in...
