CVE-2024-52949

CVE-2024-52949 affects iptraf-ng 1.2.1, with a stack-based buffer overflow in src/ifaces.c caused by an uncontrolled strcpy. Public sources in connected documents confirm the issue and that upgrading to a fixed version mitigates the vulnerability (CBLMARINER: versions = 1.2.2-1 (or the fixed pack...

Siemens User Management Component

SUMMARY Siemens User Management Component UMC is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions...

Siemens Opcenter RDL Buffer Overflow Vulnerability

The Opcenter Research Development & Laboratory RD&L suite of software products simplifies, optimizes and aligns formulation product development, improves FMCG innovation efficiency and optimizes FMCG data management. A buffer overflow vulnerability exists in Siemens Opcenter RDL, which can be...

Siemens Opcenter Quality Buffer Overflow Vulnerability

Opcenter Quality is a closed-loop quality management system QMS product family from Siemens designed to ensure compliance and drive continuous improvement to deliver high-quality products. A buffer overflow vulnerability exists in Siemens Opcenter Quality, which can be exploited by an...

CVE-2024-52061

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries, Queuing Service, Recording Service, Routing Service allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before...

CVE-2024-47538 GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

The vulnerability of the virtio component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the virtio component in the Linux operating system is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-54094

Solid Edge SE2024 (all versions earlier than V224.0 Update 5) is affected by a heap-based buffer overflow during parsing of specially crafted PAR files. The flaw can allow code execution in the context of the current process. Affected product: Siemens Solid Edge SE2024; vulnerable component: PAR ...

Adobe Premiere Pro < 24.6.4 / 25.0 < 25.1 Arbitrary code execution (APSB24-104)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 24.6.4, 25.1. It is, therefore, affected by a vulnerability as referenced in the APSB24-104 advisory. - Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that...

OPENSUSE-SU-2024:0396-1 Security update for radare2

This update for radare2 fixes the following issues: Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parsedie function boo1234065. - For more details, check full release notes:...

CVE-2024-48871 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution...

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-48211)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that stems from susceptibility to an out-of-bounds read vulnerability that could lead to sensitive memory disclosure. An attacker can...

CVE-2024-30962

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...

curl: Buffer Overflow Vulnerability in strcpy() Leading to Remote Code Execution

Summary: The vulnerability in the program arises from a classic buffer overflow, triggered by the unsafe use of the strcpy function without bounds checking. The program copies data from a source buffer to a destination buffer, allowing attackers to overflow the buffer if the input string exceeds...

D-Link DIR-605L Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from D-Link that supports a variety of network connections and security settings. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates in the file /goform/formResetStatistic parameter curTime, no details of the vulnerability are...

MGASA-2024-0380 Updated dcmtk packages fix security vulnerability

A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. CVE-2024-27628...

Quectel EC25-EUX 安全漏洞

The Quectel EC25-EUX is a series of LTE Cat 4 IoT modules with LCC form factor from Quectel. A security vulnerability exists in the Quectel EC25-EUX that stems from the inclusion of a buffer overflow vulnerability...

RHEL 9 : tigervnc (RHSA-2024:10090)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10090 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it...

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that originates from an out-of-bounds write in the PDF file parsing function, which can be exploited by a remote attacker to cause remote code execution...

Adobe Audition Buffer Overflow Vulnerability (CNVD-2024-46402)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product mainly uses a comprehensive toolset that includes multi-track, waveform and spectral display to mix, edit and create audio content. Adobe Audition suffers from a buffer overflow vulnerability...