CVE-2021-28186

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-2 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28189

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28175

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

Tobesoft Xplatform Code Execution Vulnerability (CNVD-2021-25270)

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in Tobesoft Xplatform, which stems from an unchecked offset input range...

The vulnerability of the microprogramming software of the Intel Modular Server MFS2600KI arises from copying buffers without checking the size of the input data. This allows a malicious actor to cause service failures.

The vulnerability of the Microprogramming Software of the Intel Modular Server MFS2600KI is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Mozilla Firefox browser, related to the lack of a mechanism for checking input data, allows attackers to carry out spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanism for checking the input character “i”. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

Infraware Polaris ML Report Program Buffer Error Vulnerability

Infraware Polaris ML Report is a web browser based web software from Infraware, Korea that enables compatibility printing reports. A security vulnerability exists in ML Report Program, which originates from a stack-based buffer overflow in the sub41EAF0 function of mlreportdeam .exe. The function...

Genvini Dlt-daemon Buffer Error Vulnerability

Genvini Dlt-daemon is a Genvini organization's software for logging and tracing. The software provides a logging and tracing interface using a standardized protocol specified in the AUTOSAR Standard 4.0 DLT, and is used as a logging framework in some programs. A buffer error vulnerability exists ...

nss: Check length of inputs for cryptographic primitives

A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability...

The vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, lies in the fact that they allow copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the copying of buffers without checking the size of the input data. Exploiting these vulnerabilities can allow a malicious acto...

The vulnerability of the `SyncRes::processAnswer` function in the recursive DNS server PowerDNS Recursor allows a attacker to access confidential data.

The vulnerability of the SyncRes::processAnswer function in the recursive DNS server PowerDNS Recursor is related to the lack of a mechanism for verifying the correctness of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data...

CVE-2020-8729

Buffer copy without checking size of input for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the user interface in Google Chrome browsers allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome browsers is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s user interface is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...

CVE-2020-10615

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper validation of the length of user-supplied data, prior to copying it to a fixed-length stack-based buffer. Authentication ...

The vulnerability of Firefox browser, related to copying buffers without checking the size of the input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers is related to a memory buffer overflow error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Linux kernel buffer overflow vulnerability (CNVD-2019-29641)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'checkinputterm' function of the sound/usb/mixer.c file in Linux kernel 5.2.9 and earlier. The vulnerability stems from a...

FANUC Robotics Virtual Robot Controller Buffer Overflow Vulnerability

FANUC Robotics Virtual Robot Controller is Japan's Fanuc FANUC company's set of robot simulation control software. A buffer overflow vulnerability exists in FANUC Robotics Virtual Robot Controller version 8.23. The vulnerability originates when a networked system or product performs an operation ...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A buffer overflow vulnerability exists in Advantech...

The vulnerability of the Perl_my_setenv function in the Perl programming language, related to errors in processing regular expressions, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Perlmysetenv function in “util.c” of the Perl programming language is related to errors in processing regular expressions. This leads to copying data into a buffer without checking the size of the input data, resulting in integer overflow. Exploiting this vulnerability ca...