840 matches found
CBL Mariner 2.0 Security Update: unzip (CVE-2022-0529)
The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0529 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string...
Fortinet FortiProxy Out-of-bound Write in sslvpnd (FG-IR-24-255)
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. Note that Nessus has...
CVE-2024-8596
A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2024-8596
Summary: CVE-2024-8596 affects Autodesk AutoCAD via parsing of MODEL files in the libodxdll.dll component, causing an Out-of-Bounds Write that can crash, corrupt data, or allow arbitrary code execution. Documentation from ZDI indicates remote code execution is possible if a user opens a malicious...
CentOS 7 : firefox (RHSA-2021:1363)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1363 advisory. - Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as wel...
NVIDIA CUDA Toolkit < 12.6.68 (12.6U1) Multiple Vulnerabilities (August 2024)
The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.6.68 12.6U1. It is, therefore, affected by multiple vulnerabilities as referenced in the August 2024 advisory. - NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause a crash by passi...
CVE-2024-0110
A flaw was found in the NVIDIA CUDA Toolkit. Affected versions of this package contain a vulnerability in the cuobjdump command where a user may cause an out-of-bounds write by passing a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service...
CVE-2024-0110
NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service...
CVE-2024-0110
NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service...
CVE-2024-0110
NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service...
CVE-2024-0110
NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service...
CVE-2024-0110
CVE-2024-0110 is a vulnerability in NVIDIA CUDA Toolkit involving the cuobjdump command. The issue arises from insufficient validation in the cuobjdump/ELF handling, allowing an out-of-bounds write when a malformed ELF file is processed. A successful exploit may lead to code execution or denial o...
CVE-2024-0110
NVIDIA CUDA Toolkit contains a vulnerability in command cuobjdump where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service...
PT-2024-15348
Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit affected versions not specified Description The issue is related to the cuobjdump command in NVIDIA CUDA Toolkit, where a user can cause an out-of-bound write by passing in a malformed ELF file. This can lead to code...
CVE-2024-39391 Adobe Indesign XLS File Parsing Out Of Bound Write Remote Code execution vulnerability
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-39394 Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution Vulnerability
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-39394 Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution Vulnerability
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Microsoft CLIPSP.SYS License update privilege escalation vulnerability
Talos Vulnerability Report TALOS-2024-1966 Microsoft CLIPSP.SYS License update privilege escalation vulnerability August 13, 2024 CVE Number CVE-2024-38186 SUMMARY A privilege escalation vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Dell iDRAC Service Module < 5.3.1.0 Multiple Vulnerabilities
Dell iDRAC Service Module version 5.3.0.0 and prior, contains multiple Out-of-bound Write Vulnerabilities. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event. Note that Nessus has not tested for this issue but has instead relied only on the...