Samsung Ldfw 缓冲区错误漏洞

Samsung Ldfw is a loadable firmware from Samsung South Korea. A security vulnerability exists in Samsung LDFW and BL31 that stems from incorrect boundary checking of the LDFW and BL31 security logs, allowing an attacker to arbitrarily write to memory and execute code...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A buffer overflow vulnerability exists in Mozilla Firefox, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorrect re...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer overflow vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a stack buffer overflow vulnerability that exists due to a boundary error in the handling of untrusted input. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Facebook WhatsApp 缓冲区错误漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the software to send texts, images, etc. WhatsApp Business is the commercial...

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to deficiencies in system-defined boundary controls. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially creat...

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to breaching the initial buffer boundary, allows a perpetrator to execute arbitrary code in the context of the current user.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the violation of the buffer’s initial boundary. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user, through a specially created application...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a failure to properly check for boundaries in TBD of TBD, which could allow for out-of-bounds writes. An attacker with system execution...

D-Link DIR-809 缓冲区错误漏洞

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link, China, which stems from the failure of the sub8003183C function in the product/fromLogin link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in a denial of...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

Ubuntu: Security Advisory (USN-5161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5161-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

Active Exploitation of Apache HTTP Server CVE-2021-40438

CVE | Vendor Advisory | AttackerKB | IVM Content | Patching Urgency | Last Update ---|---|---|---|---|--- CVE-2021-40438 | Apache Advisory | AttackerKB | 09/16/2021 multiple | ASAP | December 1, 2021 14:00 ET On September 16, 2021, Apache released version 2.4.49 of HTTP Server, which included a f...

Bentley ContextCapture 缓冲区错误漏洞

Bentley ContextCapture is a 3D reality modeling software. A buffer error vulnerability exists in Bentley ContextCapture that stems from a boundary condition when parsing an OBJ file. A remote attacker could create a specially crafted file, trick the victim into opening it, trigger an out-of-bound...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. The MediaTek chips are vulnerable to an input validation error vulnerability that originates from a boundary error when handling untrusted input in the AudioManager API. A local administrator can use...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

The vulnerability of the vDaemon software from Cisco IOS XE SD-WAN allows a attacker to trigger buffer overflows.

The vulnerability of the vDaemon software in Cisco IOS XE SD-WAN lies in insufficient boundary checking during traffic processing. Exploiting this vulnerability can allow a remote attacker to trigger buffer overflows...

Vim 缓冲区错误漏洞

Vim is a UNIX-based editor, and a buffer overflow vulnerability exists in Vim, which stems from the product's failure to properly determine memory boundaries and can be exploited by attackers to cause a buffer overflow...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...