CVE-2020-27372

A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the runinterpreter function...

FATEK Automation WinProladder Buffer Overflow Vulnerability (CNVD-2021-83603)

FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code in the context of the current process...

多款Qualcomm产品输入验证错误漏洞

Qualcomm MSM8996AU and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The MSM8996AU is a central processing unit CPU product.QCA6574AU is a central processing unit CPU product.SD 636 is a central processing unit CPU product. Qualcomm An input validation error vulnerability exists...

libde265 Global Buffer Overflow Vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a global buffer overflow vulnerability in the decodeCABACbit function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Geutebruck instantrec Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Geutebruck instantrec Remote Command Execution', 'Description' = %q This module exploits a buffer overflow within the 'action' parameter of the...

CVE-2020-21529

fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c...

CVE-2020-21531

fig2dev 3.2.7b contains a global buffer overflow in the convpatternindex function in gencgm.c...

Siemens SIPROTEC 5 relays buffer overflow vulnerability

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...

Huawei EulerOS: Security Advisory for blktrace (EulerOS-SA-2021-2356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python < 3.4.9, 3.5.x < 3.5.6, 3.6.x < 3.6.5 Python Issue (bpo-33001) - Windows

Python is prone to a buffer overflow vulnerability in SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescripti...

SUSE SLED15 / SLES15 Security Update : libaom (SUSE-SU-2021:3005-1)

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:3005-1 advisory. - CVE-2021-30475: Fixed buffer overflow in aomdsp/noisemodel.c bsc1189497. Tenable has extracted the preceding description block directly from...

RPKI 缓冲区错误漏洞

RPKI is Resource Public Key Infrastructure RPKI, also known as Resource Certification Resource Certification, the full name in Chinese is "Internet Code Resource Public Key Infrastructure", is a public key infrastructure PKI framework designed to make the Internet routing infrastructure more...

ROS-2-1825

2.1825 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

CVE-2021-33930

A flaw was found in libsolv. A buffer overflow vulnerability in the poolinstallablewhatprovides function allows attackers to cause a denial of service. The highest threat from this vulnerability is to system availability...

CVE-2021-33930

Buffer overflow vulnerability in function poolinstallablewhatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

SUSE-SU-2021:2794-1 Security update for aspell

This update for aspell fixes the following issues: - CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:duptop bsc1188576...

CVE-2021-36762

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd:tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet...

exiv2 security update

0.27.3-3 - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz1990355...

PT-2021-6546 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the put arrow component in genpict2e.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pict2e format. Recommendations: For fig2d...

EulerOS 2.0 SP9 : python-cryptography (EulerOS-SA-2021-2278)

According to the version of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could...