426 matches found
CVE-2022-0519 Buffer Access with Incorrect Length Value in radareorg/radare2
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...
CVE-2022-0519 Buffer Access with Incorrect Length Value in radareorg/radare2
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...
CVE-2022-0519
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...
CVE-2022-0519
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2...
Siemens Nucleus RTOS-based APOGEE and TALON Products Buffer Access with Incorrect Length Value (CVE-2021-31885)
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...
EulerOS 2.0 SP9 : qemu (EulerOS-SA-2022-1034)
According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd'...
EulerOS 2.0 SP9 : qemu (EulerOS-SA-2022-1014)
According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd'...
Siemens Energy PLUSCONTROL
1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Energy Equipment: PLUSCONTROL Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Buffer Access with Incorrect Length Value, Integer Underflow, Improper Handling...
Siemens Nucleus RTOS TCP/IP Stack
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Nucleus Net, Nucleus ReadyStart, Capital VSTAR Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Out-of-bounds Read, Improper Restriction of...
PYSEC-2021-815
TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...
PYSEC-2021-815
TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...
Adobe Prelude 缓冲区错误漏洞
Adobe Prelude is a video recording and capture tool designed for intuitive and efficient media organization and metadata entry to quickly tag and transcode video footage and quickly create rough cuts.Adobe Prelude 10.1 and earlier versions are vulnerable to an out-of-bounds memory buffer access...
Adobe Media Encoder 缓冲区错误漏洞
Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds memory buffer access vulnerability in Adobe Media Encoder 15.4.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
Adobe Media Encoder 缓冲区错误漏洞
Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds memory buffer access vulnerability in Adobe Media Encoder 15.4.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...
DEBIAN-CVE-2021-3746
A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...
CVE-2021-3581
Buffer Access with Incorrect Length Value in zephyr. Zephyr versions = =2.5.0 contain Buffer Access with Incorrect Length Value CWE-805. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5...
CVE-2021-3581
CVE-2021-3581 affects Zephyr RTOS, specifically versions 2.5.0 and later, due to a Buffer Access with Incorrect Length Value (CWE-805) . The available connected sources indicate the issue exists in Zephyr and cite a GHSA advisory; CVSS vectors from NVD point to a high impact (ISC/availability/con...
CVE-2021-3581 Buffer Access with Incorrect Length Value in zephyr
Buffer Access with Incorrect Length Value in zephyr. Zephyr versions = =2.5.0 contain Buffer Access with Incorrect Length Value CWE-805. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5...
Zephyr 安全漏洞
Zephyr is an open source, small, scalable, real-time operating system. a security vulnerability exists in Zephyr, which stems from the use of incorrect values for buffer access. No details of the vulnerability are currently available...
UBUNTU-CVE-2021-32672
Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...