Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2023-3045)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rockwell Automation Arena Simulation Software 缓冲区错误漏洞

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. Rockwell Automation Arena Simulation Software suffers from a buffer overflow vulnerability that originates from a boundary error when the...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2023-76927)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A...

Xiaomi Router 安全漏洞

Xiaomi Router is a series of wireless routers from the Chinese company Xiaomi. Xiaomi Router suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerability to execute arbitrary code or...

Yifan YF325 安全漏洞

Yifan YF325 is an industrial cellular router. A buffer overflow vulnerability exists in Yifan YF325 v1.020221108, which originates from a boundary error in the nextpage parameter of the cgihandler function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer...

Yifan YF325 安全漏洞

Yifan YF325 is an industrial cellular router. The Yifan YF325 gozilacgi function suffers from a buffer overflow vulnerability that originates from a boundary error in the nextpage parameter of the gozilacgi function when handling untrusted input. An attacker can exploit this vulnerability to caus...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a buffer overflow vulnerability that originates from a boundary error when the application handles untrusted input, which can be exploited by an attacker to execute arbitrary code on the system or cause th...

Adobe Media Encoder Buffer Overflow Vulnerability (CNVD-2023-82287)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerabilit...

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit the vulnerabilit...

Vim 安全漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.1873, which stems from a boundary error in the regexp.c:2482 function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system ...

Tenda AC8 formSetDeviceName function stack buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management features. The Tenda AC8 suffers from a stack buffer overflow vulnerability that originates from a boundary error in the function...

CVE-2023-41361

A vulnerability was found in FRRouting stemming from a boundary error in bgpd/bgpopen.c. The issue arises because it fails to check for an excessively large length of the received software version rcv. This flaw allows a remote attacker to overflow a buffer by sending specially crafted data to th...

_reserveTokenSpecified does not check if price is in allowed range

Lines of code Vulnerability details Impact Price could go out of range Proof of Concept EvolvingProteus defines a price range using 2 constants, MAXM and MINM: int128 constant MAXM = 0x5f5e1000000000000000000; int128 constant MINM = 0x00000000000002af31dc461; These constants are used in...

FreeImage C_IStream::read function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage CIStream::read function, which originates from a boundary error in the CIStream::read function of the PluginEXR.cpp file when handling untrusted...

FreeImage LoadRGB function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage LoadRGB function, which originates from a boundary error in the LoadRGB function of the PluginDDS.cpp file when handling untrusted input. An...

GNU Scientific Library 安全漏洞

GNU Scientific Library is an open source scientific computing library developed by the GNU organization , mainly used for C/C++ programs , providing mathematical operations , statistical analysis , linear algebra , etc. more than 1,000 functions , applicable to physical simulation , engineering...

GNU Binutils 缓冲区错误漏洞

GNU Binutils is a set of open source tools for working with binary files such as target files, executables, libraries, etc., mainly used in the areas of compilation, debugging, reverse engineering and so on. GNU Binutils suffers from a buffer overflow vulnerability that originates from a boundary...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage LoadRGB function, which originates from a boundary error in the LoadRGB function of the PluginDDS.cpp file when handling untrusted input. An...

radare2 buffer overflow vulnerability (CNVD-2023-64112)

radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability exists in radare2 versions prior to 5.9.0, which originates from a boundary error when the program processes untrusted input. A remote attacker could exploit this vulnerability to execute...

Fortinet FortiOS Buffer Overflow Vulnerability (CNVD-2023-64450)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS suffers from a...