The vulnerability of the WebAudio component in the Mozilla Firefox browser allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the WebAudio component in the Mozilla Firefox browser involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code...

CVE-2024-23829 aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of proxies in order to protect against...

aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

Summary Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of proxies in order to protect against injection of additional requests. Additionally, validation could trigger...

The vulnerability in the implementation of the Wayland protocol for X.Org XWayland, which is related to the execution of operations beyond the buffer boundaries in memory, allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Wayland protocol for X.Org XWayland, which is part of the X.Org Server for the X Window System, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitra...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries, allowing attackers to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Jackson-databind library, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the Jackson-databind library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2023-33219

The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

Stack overflow

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

CVE-2023-33220 Stack Buffer Overflow when checking some attributes during retrofit

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

Advisory ROSA-SA-2023-2306

Software: hivex 1.3.18 OS: ROSA Virtualization 2.1 packageevrstring: hivex-1.3.18-23.rv3.src.rpm CVE-ID: CVE-2021-3622 BDU-ID: 2021-04419 CVE-Crit: LOW CVE-DESC.: A vulnerability in the getchildren function of the getchildren library for retrieving the contents of Windows hivex registry branches ...

The vulnerability of the strlcpy() function in Netgear Orbi RBR750 router software allows a hacker to cause a service failure.

The vulnerability of the strlcpy function in Netgear Orbi RBR750 router software lies in the fact that the operation escapes the buffer boundaries when processing the lengths of the X-Forwarded-For and X-Forwarded-Proto headers. Exploiting this vulnerability allows a remote attacker to cause...

Stale copy of the public suffix list

We have identified that this project contains an out-of-date version of the Public Suffix List https://publicsuffix.org/. We are carrying out research to identify the potential impacts of using old versions of the Public Suffix List, and we intend to publish our results in academic conferences an...

GHSA-W4X6-HH3X-WJRX Stale copy of the public suffix list

We have identified that this project contains an out-of-date version of the Public Suffix List https://publicsuffix.org/. We are carrying out research to identify the potential impacts of using old versions of the Public Suffix List, and we intend to publish our results in academic conferences an...

PT-2023-33064 · Unknown · Gsemac.Common

Name of the Vulnerable Software and Affected Versions: Gsemac.Common affected versions not specified Description: The project contains an out-of-date version of the Public Suffix List. Using old versions of the Public Suffix List can lead to incorrect construction of privacy boundaries between...

Advisory ROSA-SA-2023-2302

software: qemu 7.2.0 OS: ROSA-CHROME packageevrstring: qemu-7.2.0-2.src.rpm CVE-ID: CVE-2023-0330 BDU-ID: 2023-04834 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the lsi53c895a.c component of the QEMU hardware emulator is related to writing beyond buffer boundaries. Exploitation of the...

The vulnerability of the njs_dump_is_recursive function (rc/njs_vmcode.c) in the njs interpreter of the nginx server allows a attacker to cause a service failure.

The vulnerability of the njsdumpisrecursive function rc/njsvmcode.c in the njs interpreter of the nginx server involves reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of the njs_lvlhsh_find function in the njs interpreter of the nginx server, allowing a hacker to cause a service failure

The vulnerability of the jsvmcodereturn function src/njsvmcode.c in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the microprogrammed software of ZyXEL USG FLEX and ATP devices, related to the operation of writing data beyond the buffer in memory, allows a intruder to cause service failure.

The vulnerability of the microprogrammed network device software of ZyXEL USG FLEX and ATP lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by executing certain commands...

The vulnerability of the MXF-file parsers of the Gstreamer multimedia framework allows a hacker to execute arbitrary code.

The vulnerability of Gstreamer’s MXF files parser is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism...