4747 matches found
CVE-2022-42262
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...
CVE-2022-42261
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...
CVE-2022-42262: Out-of-bounds Write
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...
CVE-2022-42261: Buffer Copy without Checking Size of Input
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...
The vulnerability of the WILC1000 wireless network driver for Linux operating systems allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the wireless network driver WILC1000 /net/wireless/microchip/wilc1000/cfg80211.c in the Linux kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause...
The vulnerability of Huawei’s microprogram code in software-hardware devices, related to writing beyond the buffer boundaries in memory, allows a hacker to trigger a service failure.
The vulnerability of microprogram code in Huawei’s software and hardware devices is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted NETCONF packets to t...
The vulnerability in the implementation of the xmlSnprintfElementContent() function in the libxml2 library allows a attacker to cause a service failure.
The vulnerability of the xmlSnprintfElementContent function implementation in the libxml2 library is related to the escape of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the PV_DecodePredictedIntraDC function (dec_pred_intra_dc.cpp) in the Android operating system allows a hacker to execute arbitrary code.
The vulnerability of the PVDecodePredictedIntraDC function decpredintradc.cpp in the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerabilities of Siemens SIMATIC and SINAMICS software products allow a perpetrator to execute arbitrary code.
The vulnerability of Siemens SIMATIC and SINAMICS software products arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the driver drivers/usb/mon/mon_bin.c of Linux operating systems allows a hacker to execute arbitrary code.
The vulnerability in the driver drivers/usb/mon/monbin.c of Linux operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / libopenssl3 / etc (SUSE-SU-2022:4586-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4586-1 advisory. - CVE-2022-3996: Fixed X.509 Policy Constraints Double Locking bsc1206374 Tenable has extracted...
CLSA-2022-1671481209 Fix CVE(s): CVE-2020-27618, CVE-2019-25013
SECURITY UPDATE: buffer overrun in EUC-KR conversion module - debian/patches/any/CVE-2019-25013: skip two bytes when told to skip over the unknown designation, potentially running over the buffer end - CVE-2019-25013 SECURITY UPDATE: hang in the iconv program - debian/patches/any/CVE-2020-27618:...
NewStart CGSL CORE 5.04 / MAIN 5.04 : rsyslog Vulnerability (NS-SA-2022-0103)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is use...
OpenSSL 3.0.0 < 3.0.8 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.8. It is, therefore, affected by a denial of service DoS vulnerability. If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some...
The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the possibility of an operation exceeding the buffer boundaries in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute arbitrary code using a...
The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the possibility of an operation exceeding the buffer boundaries in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute arbitrary code using a...
The vulnerability of the network socket of the VMware ESXi hypervisor allows a attacker to execute arbitrary code with elevated privileges.
The vulnerability of the VMware ESXi hypervisor’s network socket is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...
Amazon Linux 2 : systemd (ALAS-2022-1899)
The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1899 advisory. An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...
ALPINE-CVE-2022-35260
curl can be told to parse a .netrc file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause ...
PT-2022-26344 · Nvidia +1 · Nvidia Vgpu +1
Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: The issue is related to an input index not being validated in the Virtual GPU Manager vGPU plugin, which may lead to buffer overrun. This could result in data tampering,...