SHEKAR Technology Endoscope Buffer Overflow Vulnerability (CNVD-2019-18876)

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A buffer overflow vulnerability exists in SHEKAR Technology Endoscope. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data...

The vulnerability of the Intel Graphics Driver arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to trigger a system failure.

The vulnerability of the Intel Graphics Driver is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to exploit the memory content of processes.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access the memory contents of processes using a specially crafted web page or...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

Microsoft Edge Buffer Overflow Vulnerability (CNVD-2019-27396)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A buffer overflow vulnerability exists in the way the Chakra scripting engine in Microsoft Edge handles in-memory objects. The vulnerability originates when a web system or product perfor...

Intel NUC Kit Buffer Overflow Vulnerability

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer overflow vulnerability exists in the system firmware in the Intel NUC Kit, which originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting ...

Input validation

XML Entity Expansion Billion Laughs Attack on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken. Eventually, the JVM process will run out of memory. Otherwise, if the OS does not bound the memory on that process, memory will...

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-17524)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer error vulnerability...

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer raise vulnerability...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-16070)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Debian DSA-4444-1 : linux - security update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

Multiple researchers have discovered vulnerabilities in the way the Intel processor designs have implemented speculative forwarding of data filled into temporary microarchitectural structures buffers. This flaw could allow an attacker controlling an unprivileged process to read sensitive...

Google Android System typer.cc file out-of-bounds write vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the JSCallTyper of the typed.cc file in Android. The vulnerability stems from a networked system or product performing operations in memory without...

Foxit Reader and Foxit PhantomPDF for Windows Out-of-Bounds Write Vulnerability (CNVD-2019-13817)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An out-of-bounds write vulnerability exists in Foxit Reader 9.4.1.16828 and earlier, Foxit PhantomPDF 8.3.9.41099 and earlier, and Foxit PhantomPDF 9.4.1.16828 and earlier on Windows platforms, which...

The vulnerability of the Dovecot mail server, related to the execution of operations beyond buffer boundaries in memory, allows attackers to increase their privileges.

The vulnerability of the Dovecot mail server stems from the lack of checks for buffer sizes during the reading of FTS headers or POP3-UIDL from the Dovecot pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the pgxtovolume function in the OpenJPEG library, related to writing beyond the buffer boundaries, allows a attacker to cause a service failure and execute arbitrary code.

The vulnerability of the pgxtovolume function jp3d/convert.c in the OpenJPEG image encoding/decoding library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and execute arbitrary code...

The vulnerability of the wNumCoef function in the multimedia SDL library, related to reading beyond the buffer data boundary, allows attackers to gain unauthorized access to information.

The vulnerability of the wNumCoef function in the multimedia library SDL involves reading data beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...

The vulnerability of the _XcursorTheme function in the libxcursor package of the Debian GNU/Linux operating system relates to the execution of operations beyond the single byte range. This allows an attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the XcursorThemeInherits function in the library.c file of the libxcursor package on the Debian GNU/Linux operating system is related to the execution of operations beyond the buffer boundaries for a null-terminated string. Exploiting this vulnerability allows an attacker to...

The vulnerability of the sparse_dump_region function in the GNU Tar archive utility, which involves reading beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the sparsedumpregion function in the GNU Tar archive manager is related to reading beyond the buffer boundaries when the --sparse flag is used. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Fortinet FortiOS Heap Buffer Overflow Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A heap buffer overflow...

The vulnerability of the elf32_xlatetom function in the elfutils package, related to the possibility of the operation exceeding the buffer boundaries in memory, allows a hacker to trigger a service failure.

The vulnerability of the elf32xlatetom function in the libelf package within the elfutils suite is related to the possibility of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure due to a specially crafted E...