1649 matches found
Coronavirus phishing: “Welcome back to the office…”
As offices start to slowly open back up, the theoretically post-pandemic world is changing its threat landscape once again, and that includes the likely inclusion of coronavirus phishing attempts. With the move to remote work, attackers switched up their tactics. Personal devices and home network...
lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c
A buffer overflow was found in the lldpdecode function in daemon/protocols/lldp.c in lldpd. This flaw allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries. This threatens the...
Mobile Viewpoint Wireless Multiplex Terminal缓冲区错误漏洞
The Mobile Viewpoint Wireless Multiplex Terminal is a wireless multiplexing technology based device from Mobile Viewpoint in the Netherlands that increases bandwidth. The device can bundle multiple wireless networks to increase bandwidth and provide users with high quality video. A buffer error...
Reducing Risk With Identity Access Management (IAM)
A cloudy picture of identity and access As your supply chain grows, so does your attack surface. As business scales up and cloud providers release new services and resources to support, it becomes exponentially more challenging for security teams to manage access. With this growth, an intrinsic —...
The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows an attacker to trigger memory corruption and execute arbitrary code on the target system.
The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption and execute arbitrary code on the target system...
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...
The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows attackers to execute arbitrary code.
The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
function tokenByIndex treats last index as invalid
Handle paulius.eth Vulnerability details Impact NFT indexes start from 0: // Don't allow a zero index, start counting at 1 return value.add1; so if there are 30 tokens, indexes would be 1-30. However, function tokenByIndex sets such boundaries: requireindex 0 && index TOKENLIMIT; which means that...
The vulnerability of the implementation of the TCP/IP protocol stack for the microprogrammable logic controller Modicon M218 lies in the ability to cause a service failure by writing beyond the buffer memory boundaries.
The vulnerability of the implementation of the TCP/IP protocol stack for the microprogrammable logic controller Modicon M218 lies in the writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the system...
The vulnerability of the FingerTipS component in Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the FingerTipS component in Android operating systems relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), arises from operations that go beyond the buffer boundaries in memory, allowing attackers to read or write arbitrary files.
The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises from the operation of a command that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker who operates remotely to read or write arbitrary files...
The vulnerability of the load_pnm() function in the CImg library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the loadpnm function in the CImg library arises from the operation being performed outside the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information throu...
Out of bounds read in Pillow
An issue was discovered in Pillow before 8.2.0. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...
GHSA-MVG9-XFFR-P774 Out of bounds read in Pillow
An issue was discovered in Pillow before 8.2.0. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...
CVE-2020-7464
In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure4 device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a...
CVE-2021-26715
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...
Server side request forgery (ssrf)
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...
CVE-2021-26715
The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery SSRF vulnerability. The vulnerability arises due to unsafe usage of the logouri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP reque...