CVE-2020-3288 Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-8619 A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

In ISC BIND9 versions BIND 9.11.14 - 9.11.19, BIND 9.14.9 - 9.14.12, BIND 9.16.0 - 9.16.3, BIND Supported Preview Edition 9.11.14-S1 - 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an...

CVE-2020-8618 A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients...

Code injection

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed...

The vulnerability of the Chakra browser script mechanism in Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Morgan Stanley Hobbes Out-of-Bounds Read/Write Vulnerability

Morgan Stanley Hobbes is an embedded language compiler and runtime program from Morgan Stanley USA. An out-of-bounds read/write vulnerability exists in Morgan Stanley Hobbes version 2020-05-21 and earlier. The vulnerability stems from a lack of boundary checking in the array implementation. An...

Frigate Professional 'Find Computer' Local Buffer Overflow Vulnerability

Frigate is a free file management software for Windows only, with basic copy, duplicate, delete files or directories, create directories, change file names and more. Frigate Professional 'Find Computer' suffers from a local buffer overflow vulnerability that originates when a networked system or...

Buffer Overflow Vulnerability in Multiple IBM Products (CNVD-2020-33143)

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from IBM in the United States. A buffer overflow vulnerability exists in multiple IBM products that stems from a program not properly checking boundaries. A remote attacker could exploit the...

DEBIAN-CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

Zephyr Code Execution Vulnerability (CNVD-2020-35965)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A security vulnerability exists in the MQTT code in Zephyr 2.2.0 and later fixed in version 2.3.0, which stems from the program failing to properly check boundaries. An attacker could exploit the...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32453)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader versions prior to 9.6 and PhantomPDF versions prior to 9.6. The vulnerability originates when a networked system or product performs an operation in...

Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32446)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries,...

Foxit Reader and PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32444)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit Reader versions prior to 9.7.1 and PhantomPDF versions prior to 9.7.1. The vulnerability stems from a networked system or product that performs operations ...

The vulnerability of the rfx_process_message_tileset function in the implementation of the remote desktop protocol FreeRDP allows a intruder to cause a service failure.

The vulnerability of the rfxprocessmessagetileset function in the implementation of the remote desktop protocol FreeRDP is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Clinic Management System 1.0 - Authenticated Arbitrary File Upload

Exploit Title: Clinic Management System 1.0 - Authenticated Arbitrary File Upload Google Dork: N/A Date: 2020-06-02 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14243/open-source-clinic-management-system-php-full-source-code.html Software Link:...

CVE-2019-14039

Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8098, MDM9206,...

Design/Logic Flaw

Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8098, MDM9206,...

CVE-2019-14039

CVE-2019-14039 is an out-of-bounds read in the Qualcomm Snapdragon hardware/firmware stack. The issue arises from an incorrect boundary check in the ADM callback function when processing payloads in command responses, affecting multiple Snapdragon families (Auto, Compute, Consumer IoT, Industrial...

OPENSUSE-SU-2020:0757-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. - CVE-2020-2755: Fixed an...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31439)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in ntlmreadNegotiateMessage in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory witho...