1595 matches found
The vulnerability in Intel NUC’s built-in software arises from an operation that goes beyond the buffer boundaries in memory, allowing attackers to exploit their privileges.
The vulnerability in Intel NUC’s built-in software arises from an operation that occurs outside the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2022-24406
OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls...
CVE-2022-24406
OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls...
PT-2022-16676 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows for Server-Side Request Forgery SSRF due to predictable multipart/form-data boundaries, which can lead to injection into internal Documentconverter API calls...
Open-Xchange OX App Suite 安全特征问题漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. A security feature issue vulnerability exists in Open-Xchange OX App Suite versions prior to 7.10.6 that stems from a conflict that can change the parameters of an API request between OX App...
The vulnerability of the smtcfb_read() function in the Linux operating system allows a hacker to disclose sensitive information and cause service interruptions.
The vulnerability of the smtcfbread function in the Linux operating system relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information and cause service failures...
PT-2022-3980 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient boundaries in the controlled area of the system, which can be exploited by a remote attacker to gain unauthorized access to protected informatio...
The vulnerability of the cmdline_insert_reg() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cmdlineinsertreg function exgetln.c in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Firefox browsers, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of Firefox browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the JTAG interface implementation in microprogramming software for Intel processors allows a intruder to gain unauthorized access to protected information.
The vulnerability of the JTAG interface implementation in Intel microprogramming systems is related to deficiencies in the system’s controlled boundaries. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability in the `fs/xfs/libxfs/xfs inode_buf.c` file of the XFS file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability in the fs/xfs/libxfs/xfs inodebuf.c file of the XFS file system in Linux operating systems is related to writing beyond the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Malicious Package
Overview @uc-maps/boundaries-core.react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...
The vulnerability of the Adobe InCopy text creation and editing software lies in the writing beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe InCopy text creation and editing software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Flash Player relates to the execution of operations beyond the buffer boundaries, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Flash Player is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Adobe Illustrator 缓冲区错误漏洞
Adobe Illustrator is a suite of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...
Adobe Illustrator 缓冲区错误漏洞
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from an out-of-bounds write vulnerability that originates when a networked system or product performs an operation in memory without properly validating the data...
Taming the Digital Asset Tsunami
Internet Protocol IP addresses and the devices, web services and cloud assets behind them are the lifeblood of modern businesses. But too often companies amass thousands of digital assets, creating an unmanageable mess for IT and security teams. Left unchecked, a single forgotten, abandoned or...
netty: control chars in header names may lead to HTTP request smuggling
A flaw was found in Netty, specifically in the netty-codec-http package. This flaw allows unauthorized control characters at the beginning and end of a request, does not follow the specification, and can cause HTTP request smuggling...
ROS-20220131-01
Vulnerability in the ptp4l service of the LinuxPTP precision time protocol PTP implementation software is caused by an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, cause the application to crash as a result of creatin...
The vulnerability of the dnsproxy package from the ConnectMan controller allows a hacker to access confidential information or cause service failures.
The vulnerability of the dnsproxy package of the Connman connection manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...