The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in the fact that copying buffers without checking the size of the input data allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability of the web-based management interfaces for Cisco Small Business RV110W, RV130, RV130W, and RV215W stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the vulnerable devic...

The vulnerability in the web interface for managing microprogrammed wireless router software from Cisco’s Small Business series—RV110W, RV130, RV130W, and RV215W—allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV110W, RV130, RV130W, and RV215W routers stems from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

xhyve 安全漏洞

xhyve is a lightweight OS X virtualization solution open-sourced by machyve. A security vulnerability exists in xhyve that stems from the failure to properly validate the length of user-supplied data before copying it to a stack-based buffer, allowing a local attacker to elevate privileges on an...

Synology Media Server Buffer Overflow Vulnerability

Synology Media Server is a media server. buffer overflow vulnerability exists in versions prior to Synology Media Server 1.8.1-2876, which stems from the existence of unchecked input size buffer replication in the cgi component, and can be exploited by remote attackers to execute arbitrary code v...

Synology Media Server 安全漏洞

Synology Media Server is a media server. buffer overflow vulnerability exists in versions prior to Synology Media Server 1.8.1-2876, which stems from the existence of unchecked input size buffer replication in the cgi component, and can be exploited by remote attackers to execute arbitrary code v...

CVE-2022-27612

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors...

The implementation of commands such as “execute restore image” and “execute certificate remote” in the command-line interface (CLI) of the Fortinet FortiManager device management software, along with the FortiAnalyzer network firewall, FortiOS operating systems, and the FortiProxy proxy server for protecting against internet attacks, allows a malicious individual to execute arbitrary code or perform arbitrary commands.

The vulnerability in the implementation of the “execute restore image” and “execute certificate remote” commands in the command-line interface CLI of the Fortinet FortiManager device management software, as well as in the FortiAnalyzer network switch, FortiOS operating systems, and the FortiProxy...

The vulnerability of the IOMobileFrameBuffer component in iOS and iPadOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the IOMobileFrameBuffer component in iOS and iPadOS systems stems from the buffer being copied without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Tenda AX1806 缓冲区错误漏洞

Tenda AX1806 is a WiFi6 wireless router from Tenda China.A stack overflow vulnerability exists in Tenda AX1806 V1.0.0.1, which stems from the formSetVirtualSer function not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service attack...

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

Admidio 跨站脚本漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A cross-site scripting vulnerability exists in Admidio version 4.1.2, which stems from the program's lack of checksum filtering of...

The vulnerability of the mysqlnd/pdo function (mysqlnd_wireprotocol.c) in the PHP programming language interpreter allows a hacker to execute arbitrary code.

The vulnerability of the mysqlnd/pdo function mysqlndwireprotocol.c in the PHP programming language interpreter is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2022-3200 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22170 Description: A buffer copy without checking the size of input vulnerability exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

The vulnerability of the utfc_ptr2len() function implementation in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the utfcptr2len function in the Vim text editor lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created file...

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library involves copying buffers without checking the size of the input data during DNS packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.SparseTensorDenseAdd causes a nullptr during kernel execution , triggering a denial of service attack...

PT-2022-3142 · Unknown · Igss Data Server

Name of the Vulnerable Software and Affected Versions: IGSS Data Server - IGSSdataServer.exe versions prior to V15.0.0.22073 Description: A buffer copy without checking the size of the input issue exists, potentially leading to a stack-based buffer overflow and remote code execution when an...

The vulnerability of the config_input function in the libavfilter/vf_gblur.c component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the configinput function in the libavfilter/vfgblur.c file of the FFmpeg multimedia library involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...