19003 matches found
PT-2022-20624 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this by sending excess data to a function, allowing for arbitrary...
PT-2022-37266 · Apache · Apache Commons Configuration2
Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration2 affected versions not specified Description: The issue is related to a security exception in the java.util.Collections$UnmodifiableCollection.forEach method, which is called by...
CVE-2022-36403
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
VulnCheck KEV: CVE-2018-2628
Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server...
Oracle WebLogic Server Unspecified Vulnerability
Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server...
CVE-2022-36661
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
Null pointer dereference
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
Null pointer dereference
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciwrite. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
CVE-2022-36661
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
CVE-2022-36659
xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciwrite. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...
PT-2022-17866 · Gz · Gz
Name of the Vulnerable Software and Affected Versions: gz affected versions not specified Description: The issue is related to a possible memory corruption due to incorrect error handling in gz. This could lead to local escalation of privilege with System execution privileges needed. User...
PT-2022-18111 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Insecure Automated Optimization vulnerability in Dell BIOS. A local authenticated malicious user could exploit this vulnerability by sending malicious input via...
VulnCheck KEV: CVE-2018-6530
Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands...
Heap overflow
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readstring in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...
Heap overflow
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...
CVE-2022-39831
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...
CVE-2022-39832
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readstring in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...
PT-2022-17439 · Qualcomm · Qualcomm Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption caused by incorrect pointer arithmetic. This occurs when attempting to change the endianness in the video parser function. The estimate...
PT-2022-8937 · Libraw · Libraw
Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a memory corruption problem in the crxFreeSubbandData function, located in librawsrcdecoderscrx.cpp, which occurs when processing cr3 files. Recommendations: At the...