FATEK Automation FvDesigner Buffer Overflow Vulnerability

FATEK Automation FvDesigner is a human-computer interaction device from FATEK Automation. A buffer overflow vulnerability exists in FATEK Automation FvDesigner versions 1.5.88 and earlier, which can be exploited by an attacker to create a special project file that allows arbitrary code execution...

SUSE SLES11 Security Update : libsndfile (SUSE-SU-2021:14769-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:14769-1 advisory. - CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcmdecodeblock. bsc1188540 Tenable has extracted the preceding descripti...

Apple iPadOS 缓冲区错误漏洞

Apple iPadOS is a set of operating systems from Apple Inc. for the iPad tablet computer. A buffer error vulnerability exists in Apple iPadOS that could allow an application to execute arbitrary code with kernel privileges. The affected products and versions are as follows:Apple iPadOS 11.5.1, iOS...

CVE-2020-22283

A buffer overflow vulnerability in the icmp6sendresponsewithaddrsandnetif function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet...

PYSEC-2021-888

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4getatt called from nc4getatttc and ncgetatttext and in uffdcleanup called from netCDFDataset::netCDFDataset and netCDFDataset::netCDFDataset...

MAT File I/O Library 缓冲区错误漏洞

MAT File I/O Library matio is an open source, C language library for reading and writing binary MATLAB MAT files. A security vulnerability exists in MAT File I/O Library that stems from having a heap-based buffer overflow...

D-Link DAP-1330 Buffer Overflow Vulnerability

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. The D-Link DAP-1330 suffers from a buffer error vulnerability that arises from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker could exploit...

Fortinet FortiMail Buffer Overflow Vulnerability

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. A buffer overflow vulnerability exists in Fortinet FortiMail, which stems from a buffer size miscalculation in multiple instances. An...

SonicWall Switch Buffer Overflow Vulnerability

SonicWall Switch is a network device. A switch. A buffer overflow vulnerability exists in SonicWall Switch versions prior to 1.1.0.0-11s, which can be exploited by remote attackers to access potentially sensitive information or perform a denial of service DoS attack...

OPENSUSE-SU-2021:1651-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833...

Advisory ROSA-SA-2021-1891

Software: libsolv 0.6.34 OS: Cobalt 7.9 CVE-ID: CVE-2019-20387 CVE-Crit: HIGH CVE-DESC: repodataschema2id in repodata.c in libsolv before version 0.7.6 has an excessive heap-based buffer read due to the last schema being less than the length of the input schema. CVE-STATUS: default CVE-REV: defau...

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

CVE-2021-36089

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...

IBM Security Sevret Server Buffer Overflow Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. IBM Security Secret Server suffers from a buffer overflow vulnerability tha...

Weidmueller Industrial WLAN devices remote code execution vulnerability

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A remote code execution vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted username entry that could lead to an error message buffer overflow that could be exploited...

Updated openjpeg2 packages fix a security vulnerability

A heap-based buffer overflow was found in openjpeg. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg CVE-2021-3575...

Daniel Kamil Kozar tsMuxer buffer overflow vulnerability (CNVD-2021-49065)

tsMuxer is a transport stream multiplexing and TS encapsulation tool. A buffer overflow vulnerability exists in tsMuxer version 2.6.16. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Zephyr Buffer Overflow Vulnerability

Zephyr is an open source, small, scalable real-time operating system. A security vulnerability exists in Zephyr versions = v1.14.2 and = v2.2.0 that stems from incorrect input frame validation in ieee802154 processing. No detailed vulnerability details are currently available...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44276)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44275)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...