The vulnerability of the cmdline_erase_chars() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cmdlineerasechars function in the Vim text editor is related to the issue of writing operations beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created...

Improper Limitation of a Pathname to a Restricted Directory in Apache Solr

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...

ROS-20220516-03

A vulnerability in the zipxlzmaaloneinit function of the libarchive archiving library is related to reading beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, disclose protected information or cause a denial of service...

Adobe InDesign Code Execution Vulnerability (CNVD-2022-76625)

A security vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by an attacker to...

Adobe InDesign Code Execution Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A code execution vulnerability exists in Adobe InDesign. The vulnerability arises from a networked system or product that does not properly validate data boundaries when performing operations in...

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-45913)

A security vulnerability exists in Adobe InCopy, a text editing software for authoring from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by attackers to cause arbitrary...

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-76627)

Adobe InCopy is a text editing software for authoring from Adobe U.S. An out-of-bounds write vulnerability exists in Adobe InCopy, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory and can be exploited by an attacke...

Rip Raw - Small Tool To Analyse The Memory Of Compromised Linux Systems

Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This is not a...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-34986)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM ha...

The vulnerability of the `locale_accept_from_http` function (ext/intl/locale/locale_methods.c) in the PHP language interpreter allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the localeacceptfromhttp function located in the ext/intl/locale/localemethods.c file of the PHP language interpreter involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or...

The vulnerability of the OpenSSL library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the MLoadTypedArrayElementHole component in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows an attacker to disclose protected information.

The vulnerability of the MLoadTypedArrayElementHole component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the Vim text editor, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Adobe Illustrator, related to reading data beyond the buffer in memory, allows attackers to exploit their privileges.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges using a specially crafted file...

CVE-2022-20063

In atf spm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06171715; Issue ID: ALPS06171715...

The vulnerability of the avifDecoderDataFillImageGrid function in the Libavif encoding and decoding library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the avifDecoderDataFillImageGrid function in the Libavif library relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the software for working with animations in Adobe Character Animator, related to reading data beyond the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the Adobe Character Animator software for animation processing is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which arises from iframe content that can be rendered outside of boundaries...

The vulnerability of the `pool_installable` function in the `src/repo.h` file of the Libsolv library allows a hacker to trigger a service failure.

The vulnerability of the poolinstallable function in the src/repo.h file of the Libsolv library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service failure...

Open5Gs Denial of Service Vulnerability

Open5Gs is a C open source implementation of 5G Core and Epc, the core network for the Lte/Nr network.A denial of service vulnerability exists in Open5Gs version 2.1.4 of AMF, which stems from a network system or product that does not properly validate data boundaries when performing operations o...