The vulnerability of the AppleAVD component in operating systems such as Mac OS, iOS, iPadOS, tvOS, and watchOS allows a hacker to execute arbitrary code.

The vulnerability of the AppleAVD component in operating systems such as Mac OS, iOS, iPadOS, tvOS, and watchOS is related to the operation of writing data beyond the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2023-15909 · Facebook +10 · Zstd +9

Name of the Vulnerable Software and Affected Versions: zstd version 1.4.10 MySQL Server versions 8.0.33 and earlier Description: A vulnerability was found where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun. This issue can be exploited by a...

The vulnerabilities of the microprogramming software for the OPC UA Modicon Communication Module (BMENUA0100) and the X80 advanced RTU Communication Module (BMENOR2200H) allow attackers to cause service interruptions.

The vulnerability of the microprogramming software for the OPC UA Modicon Communication Module BMENUA0100 and the X80 advanced RTU Communication Module BMENOR2200H lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause servic...

PT-2022-4970 · Aes Crypt · Aescrypt

Name of the Vulnerable Software and Affected Versions: AES Crypt version 3.11 Description: The issue is related to reading user-provided passwords and confirmations via command-line prompts in AES Crypt for Linux. Password lengths were not checked before being read, which may lead to buffer...

PT-2022-6615 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2022-6624 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

CentOS 8 : ruby:2.6 (CESA-2022:5338)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5338 advisory. - Ruby: Buffer overrun in String-to-Float conversion CVE-2022-28739 Note that Nessus has not tested for this issue but has instead relied only on the...

PT-2022-24287 · Systemd +9 · Systemd +9

Name of the Vulnerable Software and Affected Versions: Systemd affected versions not specified Description: An off-by-one Error issue was discovered in the format timespan function of time-util.c. An attacker could supply specific values for time and accuracy that lead to a buffer overrun in form...

CLSA-2022-1657182150 Fix CVE(s): CVE-2022-2129, CVE-2022-2124, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720

SECURITY UPDATE: Reading past end of line with "gf" in Visual block mode - debian/patches/CVE-2022-1720.patch: Do not include the NUL in the length - CVE-2022-1720 SECURITY UPDATE: Searching for quotes may go over the end of the line - debian/patches/CVE-2022-2124.patch: Check for running into th...

SUSE: Security Advisory (SUSE-SU-2022:2298-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for liblouis (SUSE-SU-2022:2298-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2298-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2022-26981: fix buffer overrun in compilePassOpcode bsc1197085. - CVE-2022-31783: prevent an invalid memory write in compileRule bsc1200120...

The vulnerability of the monitoring software for Fujifilm’s PLK devices, V-Server and V-Server Lite, arises from the possibility of writing operations outside of the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the monitoring software for Fujifilm’s PLC models, V-Server and V-Server Lite, lies in the fact that the write operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute...

The vulnerability of the httpd module of the microprogramming system used in Tenda AC18 routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the httpd microprogramming system for the Tenda AC18 router is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by using...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Flash Player software is related to the execution of operations beyond the buffer in memory when processing SWF content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created malware file...

The vulnerability of the thread_call() function in the Squirrel programming language allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the threadcall function in the Squirrel programming language is related to the execution of operations outside of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code using a specially created malware fi...

The vulnerability of the Local Discovery Server (LDS) software from Siemens, related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Local Discovery Server LDS software from Siemens is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted messages...

SUSE: Security Advisory (SUSE-SU-2022:2252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for liblouis (SUSE-SU-2022:2252-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...