SUSE: Security Advisory (SUSE-SU-2021:0503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rust Buffer Overflow Vulnerability (CNVD-2021-31918)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in reorder crate for Rust 2021-02-24 and earlier versions, which stems from a swap index write operation that oversteps its bounds if the len returned by the iterator is to...

Synology Surveillance Station Buffer Overflow Vulnerability

Synology Surveillance Station is an application from Synology, a Chinese company. It provides intelligent monitoring and video management tools to protect your valuable assets. A buffer overflow vulnerability exists in Surveillance Station, which can be exploited by an attacker to execute arbitra...

D-Link DIR-816 Stack Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless AC750 dual-band router. A stack buffer overflow vulnerability exists in the handler function of /goform/addassignment in the D-Link DIR-816 A2 version 1.10 B05. An attacker can exploit the vulnerability by entering long text in the sip and smac fields to cause the...

D-Link DSL-320B-D1 Buffer Overflow Vulnerability

The D-Link DSL?320B is an Ethernet modem from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DSL-320B-D1 device EU1.25 version and earlier versions, which allows an unauthenticated, remote attacker to take over the device via login...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere BigInsights, including Broken security fixes in IBM Java and IBM SDK, Java Technology Edition Quarterly CPU - Apr 2016 (CVE-2016-0264, CVE-2016-0363)

Summary Security vulnerabilities have been identified in IBM SDK Java™ Technology Edition shipped with IBM InfoSphere BigInsights. Information about security vulnerabilities affecting IBM SDK Java has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-0264 DESCRIPTION: A...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36006)

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a string entered by the user. A...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36011)

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to the Radius configuration function failing to validate the length of a user-entered string. A remote attacker could...

ASUS BMC Firmware Security Feature Issue Vulnerability

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability caused by the CD media configuration function not validating the length of a user-entered string. A...

CVE-2021-28191

ASUS BMC firmware Web management page: The firmware update function does not validate input string length, causing a buffer overflow. This can allow a remote attacker with privileged access to cause the web service to terminate abnormally. Documented in CVE-2021-28191 and corroborated by CNVD-202...

CVE-2021-28177 ASUS BMC's firmware: buffer overflow - LDAP configuration function

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

RIOT RIOT-OS 安全漏洞

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. A buffer overflow vulnerability exists in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c in RIOT version 2021.01. No detailed vulnerability details are provided a...

Buffer Overflow Vulnerability in Various Esri Products (CNVD-2021-39523)

ESRI ArcGIS Enterprise and others are products of Environmental Systems Research Institute ESRI, Inc.ArcGIS Enterprise is a GIS Geographic Information System base software system.Esri Arcgis Server is a Web-oriented enterprise software platform that can be used to provide geolocation services. Es...

Esri ArcGIS Server Buffer Overflow Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A buffer overflow vulnerability exists in Esri ArcGIS Server 10.8.1 and earlier, which can be exploited by an attacker to achieve arbitrar...

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

Cisco IOS XE Buffer Overflow Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A buffer overflow vulnerability exists in the vDaemon process for SD-WAN on Cisco IOS XE. The vulnerability stems from insufficient boundary checking when the device processes...

Buffer Overflow Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A buffer overflow vulnerability exists in the NA400PLC from Aptar Technology Corporation, which can be exploited by an attacker to cause a system crash...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2021-22152)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. A buffer overflow vulnerability exists in Adobe Photoshop. An attacker could exploit this vulnerability to execute arbitrary code...

Schneider Electric Interactive Graphical SCADA System Buffer Overflow Vulnerability (CNVD-2021-31177)

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. A buffer overflow vulnerability exists in Interactive Graphical SCADA System IGSS Definition...

The vulnerability of the Ips ECMgr process in Cisco ASR 5000 microprogramming software allows a attacker to trigger a service failure.

The vulnerability of the Ips ECMgr process in Cisco ASR 5000 microprogrammed software lies in the fact that the operation results are written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...