Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from a boundary condition when drawing text on a canvas with WebRender disabled. A remote attacker can exploit the vulnerability to...

Google Android elevation of privilege vulnerability (CNVD-2021-43394)

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an out-of-bounds write in the memory management driver due to a lack of boundary checking...

Tor 缓冲区错误漏洞

Tor is a network of virtual tunnels. It allows individuals and groups to improve their privacy and security on the Internet. A buffer error vulnerability exists in Tor. The vulnerability arises from a networked system or product performing operations in memory without properly validating data...

Sourceforge mbsync 代码问题漏洞

Sourceforge mbsync is an application from the Sourceforge community in the United States. Provides synchronization of remote IMAP mailboxes with local maildir style mailboxes A code issue vulnerability exists in Sourceforge mbsync, which arises from a boundary error when handling an unexpected...

SUSE: Security Advisory (SUSE-SU-2013:1166-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:3115-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the kmath.dll library in the KOMPAS-3D 3D modeling system, related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the kmath.dll library in the KOMPAS-3D 3D modeling system relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted T3D format file...

SUSE: Security Advisory (SUSE-SU-2013:1166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0788-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-22548

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit...

Cisco Webex Network Recording Player 缓冲区错误漏洞

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco. Cisco WebEx Network Recording Player suffers from a buffer error vulnerability that originates from a boundary error when processing ARF and WRF files. A remote attacker could exploit this...

Khan Academy: Bypass the fix of report #1078283 due to poor validation

Hi Khan Academy Team, I was able to bypass the fix you implemented for report 1078283. The URL validation you implemented on the endpoint continue checks the presence of khanacademy.org however it doesn't have any boundary checking to ignore domains starting with .org, so if an attacker register ...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a boundary error when processing untrusted HTML content in Autofill...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a boundary error when processing untrusted HTML content in Autofill...

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a boundary error when processing untrusted HTML content in Autofill...

fig2dev buffer overflow vulnerability (CNVD-2021-86900)

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Fig2dev version 3.2.8a, which stems from a flawed boundary check in the program's read objects function, and can be exploited by an attacker to provide crafted, malicious input that can...

Xfig fig2dev 缓冲区错误漏洞

Xfig fig2dev is a tool for printing and exporting .fig format files. A buffer overflow vulnerability exists in Fig2dev version 3.2.8a, which stems from a flawed boundary check in the program's read objects function, and can be exploited by an attacker to provide crafted, malicious input that can...

Codiad 2.8.4 - Remote Code Execution (Authenticated) Exploit (3)

Exploit Title: Codiad 2.8.4 - Remote Code Execution Authenticated 3 Exploit Author: Ron Jost Hacker5preme Vendor Homepage: http://codiad.com/ Software Link: https://github.com/Codiad/Codiad/releases/tag/v.2.8.4 Version: 2.8.4 Tested on Xubuntu 20.04 CVE: CVE-2018-19423 ''' Description: Codiad 2.8...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system from Apple Inc. that was developed specifically for Mac computers. The macOS suffers from an Input Validation Error vulnerability that stems from a boundary error when processing untrustworthy input in Model I/O. A remote attacker could exploit the...