Information disclosure

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the FvDesigner software for creating operator panels, related to the execution of operations outside the buffer boundaries in memory, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the FvDesigner software for creating operator panels is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

CVE-2023-21239

CVE-2023-21239 is in the Android Framework (Notification.java, visitUris) and enables local information disclosure via a confused deputy, leaking image data across user boundaries with no extra privileges and no user interaction required. Public details describe the root cause and affected AOSP v...

CVE-2023-21239

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability in the file src/InitExt.c of the client API library for the X Window System libX11 allows a hacker to cause a service failure.

The vulnerability in the src/InitExt.c file of the X Window System libX11 library lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ASB-A-274592467

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the Horner Automation Cscape software, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Horner Automation Cscape software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially created FNT file...

The vulnerability of the Graphite Ashlar-Vellum automated drawing system lies in the ability to write beyond the buffer memory limit, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Graphite Ashlar-Vellum drawing system is related to the writing beyond the buffer boundaries of the memory during the analysis of the VC6 file. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-27908

A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Privilege Escalation vulnerability...

ROS-20230622-07

The vulnerability in the libx11 library is due to the fact that the functions in src/InitExt.c in libX11 do not check that the the values provided for request, event, or error identifiers are within the boundaries of the of the arrays to which these functions write, using these identifiers as arr...

ROS-20230620-02

Vulnerability of FreeImages library for working with graphic formats is related to reading data outside the buffer boundaries in memory. buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, to cause a denial of service via a crafted JXR file...

TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow Vulnerability

Exploit Title: Buffer Overflow in TP-Link Archer AX10EUV1.2230220 Exploit Author: Giuseppe Compare CVE: CVE-2023-34832 Vendor Homepage: https://www.tp-link.com/ Version: TP-Link Archer AX10EUV1.2230220 Buffer Overflow There is a buffer overflow in the FUN131e8 function due to using sprintf...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code or trigger malfunctions during maintenance operations.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory when processing STP files. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause service interruptions by creating a...

The vulnerability in Firefox and Firefox ESR browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Firefox and Firefox ESR browsers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

CVE-2023-21107

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-21107

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

The vulnerability of the flow processing daemon (flowd) in Juniper Networks’ Junos OS, which allows a attacker to trigger a service failure

The vulnerability of flow processing demons in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2023-28656

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

ROS-20230428-04

The vulnerability in the Pillow image library is related to improper internal resource management when working with highly compressed GIF data. resources when working with highly compressed GIF data. Exploitation of the vulnerability could allow an attacker, acting remotely, transfer a specially...

Advisory ROSA-SA-2023-2159

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: 2.4.37 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries. Exploitation of the...