The vulnerability of the read_avi_header() function in the Mplayer media player, related to writing beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the readaviheader function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mp_getbits() function in the Mplayer media player, related to writing beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the mpgetbits function in the Mplayer media player is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20240730-09

Vulnerability of NTLM New Technology LAN Manager protocol implementation in Exim mail server is related to operation exceeding buffer boundaries in memory when processing requests. Exploitation of the vulnerability could allow a remote intruder to gain unauthorized access to protected information...

ROS-20240730-01

A vulnerability in the freempimage function of the free media player Mplayer is related to writing outside of memory boundaries memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in free mpgetbits function of Mplayer media player is relate...

The vulnerability of Zoom’s video conferencing software relates to operations that go beyond the buffer limits in memory, allowing attackers to trigger a service failure.

The vulnerability of Zoom’s video conferencing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20240723-05

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an insecure privilege management vulnerability. insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate their privileges A vulnerability in the...

The vulnerability of the Ghostscript software for document processing, conversion, and generation, related to the operation of writing data beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the microprogrammed software for AutomationDirect P3-550E, related to the output of operations outside the buffer in memory, allows a intruder to trigger a malfunction during maintenance.

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system...

The vulnerability of the User Mode Driver for DirectX 11 in AMD Radeon microcomputer graphics software allows a hacker to execute arbitrary code.

The vulnerability of the User Mode Driver for DirectX 11 in AMD Radeon graphics processors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

UBUNTU-CVE-2024-40984

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 "ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine."". The initial purpose of this...

Advisory ROSA-SA-2024-2445

software: xrdp 0.9.23.1 OS: ROSA-CHROME packageevrstring: xrdp-0.9.23.1-1 CVE-ID: CVE-2023-40184 BDU-ID: 2023-07659 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the authstartsession function of the XRDP server is related to the bypassing of session restrictions. Exploitation of the vulnerabilit...

The vulnerability of the Squid proxy server, related to writing beyond the buffer limit, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

The vulnerability of the software platform for numerical modeling and analysis of Simcenter Nastran products lies in the execution of operations beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the software platform for numerical modeling and analysis in Simcenter Nastran relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current...

CBL Mariner 2.0 Security Update: wordnet (CVE-2008-3908)

The version of wordnet installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2008-3908 advisory. - Multiple buffer overflows in Princeton WordNet wn 3.0 allow context-dependent attackers to execute arbitrary...

ROS-20240702-06

The vulnerability of the libarchive archiving library of Windows operating systems is related to the operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the BSON Handler component in the client library of PyMongo, which allows a hacker to disclose confidential information or cause service failures.

The vulnerability of the BSON Handler component in the PyMongo client library relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to disclose confidential information or cause service failures...

CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

UBUNTU-CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

CVE-2024-6375 Missing authorization check may lead to shard key refinement

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...