The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s user interface is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...

CVE-2020-10615

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper validation of the length of user-supplied data, prior to copying it to a fixed-length stack-based buffer. Authentication ...

The vulnerability of Firefox browser, related to copying buffers without checking the size of the input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers is related to a memory buffer overflow error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Linux kernel buffer overflow vulnerability (CNVD-2019-29641)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'checkinputterm' function of the sound/usb/mixer.c file in Linux kernel 5.2.9 and earlier. The vulnerability stems from a...

FANUC Robotics Virtual Robot Controller Buffer Overflow Vulnerability

FANUC Robotics Virtual Robot Controller is Japan's Fanuc FANUC company's set of robot simulation control software. A buffer overflow vulnerability exists in FANUC Robotics Virtual Robot Controller version 8.23. The vulnerability originates when a networked system or product performs an operation ...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A buffer overflow vulnerability exists in Advantech...

The vulnerability of the Perl_my_setenv function in the Perl programming language, related to errors in processing regular expressions, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Perlmysetenv function in “util.c” of the Perl programming language is related to errors in processing regular expressions. This leads to copying data into a buffer without checking the size of the input data, resulting in integer overflow. Exploiting this vulnerability ca...

The vulnerability of the Qualcomm Widevine component of the Android operating system allows a hacker to trigger a memory buffer overflow.

The vulnerability of the Qualcomm Widevine component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a buffer overflow in memory...

LAquis SCADA Code Execution Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. A code execution vulnerability in LAquis SCADA 4.1.0.3870 and prior versions, which arises from the program failing to filter user input before performing a write operation to a stack object, can be exploited by a remo...

Google Android WLAN HOST Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which WLAN HOST is a wireless LAN component. WLAN HOST in Android suffers from a buffer overflow vulnerability that stems from the program not detecting input size values. An...

HPE Intelligent Management Center Arbitrary Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services, and users. wireless Service Manager WSM Software is o...

The vulnerability of the Linux operating system’s kernel, which arises due to the lack of checks for buffer length, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger buffer overflows and compromise the confidentiality, integrity, and accessibility of protect...

CVE-2017-12706

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.220170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could...

NVIDIA Driver - UVMLiteController ioctl Handling Unchecked Input/Output Lengths Privilege Escalation

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=880 The \.\UVMLiteController device is created by the nvlddmkm.sys driver, and can be opened by any user. The driver handles various control codes for this device, but there is no validation for the input/output buffer and their...

IBM Tivoli Monitoring Agent Stack Buffer Overflow Vulnerability

IBM Tivoli Monitoring ITM is a suite of system monitoring software from IBM in the United States. The software supports the detection of system bottlenecks and potential problems, performance monitoring of basic system resources, and automatic recovery from critical situations. A stack buffer...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40FF03” at address “0x004100E0”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of RPC calls numbered 0x11 “0x0040C4CB”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub0040F059” at address “0x0040F092”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x15 “0x0040CD91”. This vulnerability allows a malicious attacker to execute arbitrary code wi...

ALSA 'snd_compr_allocate_buffer' function integer overflow vulnerability

ALSA Advanced Linux Sound Architecture is a set of sound card drivers for the Linux operating system that provides audio and MIDI Musical Instrument Digital Interface. An integer overflow vulnerability exists in the 'sndcomprallocatebuffer' function of ALSA, which stems from the program's failure...

Leif M. Wright ad.cgi 1.0 Unchecked Input Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2103/info ad.cgi is an ad rotation script freely available, and written by Leif Wright. A problem exists in the script which may allow access to restricted resources. The problem occurs in the method in which the script...

3R Soft MailStudio 2000 2.0 userreg.cgi Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the /.. string passed to a CGI, thereby compromising th...