CVE-2023-31907

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

CVE-2023-30083

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVarN in util/decompile.c...

CVE-2023-20869

VMware Workstation 17.x and VMware Fusion 13.x contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine...

CVE-2023-30373

In Tenda AC15 V15.03.05.19, the function "xianpppoeuser" contains a stack-based buffer overflow vulnerability...

D-Link DIR-823G Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G version V1.0.2B05, which originates from a boundary error in the NewPassword parameter parameter when handling untrusted input. A remote attacker could exploit this...

CVE-2021-33972

Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges...

CVE-2023-26413 ZDI-CAN-20315: Adobe Substance 3D Designer USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26394 ZDI-CAN-20236: Adobe Substance 3D Stager USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

SUSE-SU-2023:1773-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2023-26767: Fixed buffer overflow vulnerability in loulogFile function bsc1209429. - CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function bsc1209432...

SUSE-SU-2023:1772-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2023-26767: Fixed buffer overflow vulnerability in loulogFile function bsc1209429. - CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function bsc1209432...

PUB-A-269657006

In TBD of TBD, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-26337

CVE-2023-26337 is a stack-based buffer overflow in Adobe Dimension ≤ 3.4.7 that allows arbitrary code execution in the context of the current user. Exploitation requires a user to open a crafted file (social/interaction). Public sources confirm the flaw affects Dimension 3.4.7 and earlier. Adobe ...

Mageia: Security Advisory (MGASA-2023-0082)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: hdf5-gnu-hpc / hdf5-gnu-hpc-devel / hdf5-gnu-mpich-hpc / etc (SUSE-SU-2023:0777-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0777-1 advisory. - CVE-2021-37501: Fixed overflow in calculation of data buffer due to bogus input file bsc1207973. Tenable has extracte...

NETGEAR Nighthawk WiFi6 Router Buffer Overflow Vulnerability

The NETGEAR Nighthawk WiFi6 Router is a series of wireless routers from NETGEAR. The NETGEAR Nighthawk WiFi6 Router suffers from a buffer overflow vulnerability that stems from the presence of buffer overflows in the device's various CGI mechanisms, which can be exploited by an attacker to execut...

CVE-2021-45423

A Buffer Overflow vulnerabilityexists in Pev 0.81 via the peexports function from exports.c.. The array offsetstoNames is dynamically allocated on the stack using exp-NumberOfFunctions as its size. However, the loop uses exp-NumberOfNames to iterate over it and set its components value. Therefore...

CVE-2023-27061

Tenda V15V1.0 V15.11.0.14152131901058 was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2023-26072

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.98 and fixes atleast the following security issues: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines o...