1661 matches found
ROS-20240402-21
Vulnerability of the OpenSC smart card software toolkit and libraries is related to a memory vulnerability during card registration using pkcs15-init. memory vulnerabilities during card registration using pkcs15-init. Exploitation of the vulnerability could allow an attacker to affect the...
The vulnerability of the operating system kernels in iPadOS, tvOS, iOS, watchOS, macOS, visionOS allows a perpetrator to execute arbitrary code.
The vulnerability of the operating system kernels, including iPadOS, tvOS, iOS, watchOS, macOS, and visionOS, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI, related to the operation of writing data beyond the buffer in memory, allows a intruder to trigger a malfunction during maintenance operations.
The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause malfunctions during...
ROS-20240402-10
A vulnerability in the NetScreen file parser of Wireshark, a computer network traffic analyzer, is related to an operation exceeding buffer boundaries. operation out of buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerabilit...
ROS-20240329-23
The vulnerability in the interface of Zabbix universal monitoring system is related to insufficient input data validation when processing the URL field of Maps element. data when processing the URL field of the Maps element. Exploitation of the vulnerability could allow an attacker, acting...
ROS-20240328-03
Vulnerability of avc420ensurebuffer and avc444ensurebuffer functions of FreeRDP RDP client is related to memory usage after its release. memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service or other impact A...
python-aiohttp: http request smuggling
An HTTP request smuggling vulnerability was found in aiohttp. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets that must trigger error handling to robustly match frame boundaries of proxies in order to protect against the injection of...
The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Rockwell Automation Arena Simulation Software 缓冲区错误漏洞
Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A security vulnerability exists in Rockwell Automation Arena Simulation Software, which stems from a memory buffer vulnerability that coul...
The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...
ROS-2-1617
2.1617 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...
The vulnerability of the drm_sched_entity_init() function in the drivers/gpu/drm/scheduler/sched_entity.c file of the Linux operating system’s DRAM driver allows a hacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the drmschedentityinit function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system’s DRM driver is related to insufficient control over buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...
The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries, allowing an attacker to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
BIT-PILLOW-2021-25291
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries...
The vulnerability of the Simcenter Femap simulation application, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Simcenter Femap simulation application lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially crafted Catia MODEL file...
The vulnerability of the ares__read_line function in the C-ares asynchronous DNS request library allows a attacker to cause a service failure.
The vulnerability of the aresreadline function in the asynchronous DNS request library C-ares is related to the operation leaving the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2024-7870 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's qcom component, where frequency table arrays are not properly terminated, leading to potential out-of-bound access when traversed by function...
The vulnerability of the `put_qpel_fallback<unsigned short>` function (implemented in fallback-motion.cc) of the h.265 Libde265 codec allows a perpetrator to trigger a service failure.
The vulnerability of the putqpelfallback function implemented in fallback-motion.cc of the h.265 Libde265 codec is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Out-of-Bounds Write
chromium is vulnerable to Out-of-Bounds Write. The vulnerability is due to improper handling of memory boundaries within the Blink library, which can be exploited by malicious HTML content...
Advisory ROSA-SA-2024-2350
Software: LibRaw 0.19.4 OS: rosa-server79 packageevrstring: LibRaw-0.19.4-2.res7 CVE-ID: CVE-2021-32142 BDU-ID: 2023-03833 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the LibRawbufferdatastream::gets function of the src/librawdatastream.cpp component of the LibRaw image processing library is...