4850 matches found
KLA11583 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability can be exploited to execute...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.
The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...
NewStart CGSL CORE 5.05 / MAIN 5.05 : curl Vulnerability (NS-SA-2019-0171)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has curl packages installed that are affected by a vulnerability: - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length ...
CVE-2019-11467
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...
CVE-2019-11467
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...
Buffer overflow
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...
CVE-2019-11467
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...
CVE-2019-11467
CVE-2019-11467 affects Couchbase Server 4.6.3 and 5.5.0 where the secondary indexing path encodes entries with collatejson. When index entries contained characters such as tab, , the encoded string could exceed expectations and trigger a buffer overrun, causing the indexer service to crash and re...
PT-2019-12327
Name of the Vulnerable Software and Affected Versions Couchbase Server versions 4.6.3 through 5.5.0 Description The issue arises when secondary indexing in Couchbase Server encodes entries to be indexed using collatejson. If index entries contain specific characters like t, , it causes a buffer...
CVE-2019-11467: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, , it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart...
The vulnerability of the Windows operating system arises from operations that go beyond buffer boundaries in memory, allowing attackers to trigger a system failure.
The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure through a specially created application...
CVE-2017-14202 The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...
The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the Cisco NX-OS network operating system allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the Cisco NX-OS network operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerabilities of DirectX graphics drivers for NVIDIA GeForce, Quadro, and Tesla allow attackers to cause system failures or execute arbitrary code.
The vulnerability of DirectX graphics driver for NVIDIA GeForce, Quadro, and Tesla lies in the issue of data writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially crafted shader...
The vulnerability of the Windows Jet Database Engine database management system allows a hacker to execute arbitrary code.
The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...
The vulnerability of the BZ2_decompress function in the bzip2 data compression utility allows a hacker to execute arbitrary code.
The vulnerability of the BZ2decompress function in the bzip2 data compression utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a attacker to execute arbitrary code on the target system by causing the user to open a specially crafted malicious...
[SECURITY] [DLA 1884-1] linux security update
Package : linux Version : 3.16.72-1 CVE ID : CVE-2017-18509 CVE-2018-20836 CVE-2019-1125 CVE-2019-3900 CVE-2019-10207 CVE-2019-10638 CVE-2019-13631 CVE-2019-14283 CVE-2019-14284 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of...
NewStart CGSL MAIN 5.04 : curl Vulnerability (NS-SA-2019-0002)
The remote NewStart CGSL host, running version MAIN 5.04, has curl packages installed that are affected by a vulnerability: - A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this...
The vulnerability of the CompositeImage function in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the CompositeImage function in the ImageMagick console-based graphics editor MagickCore/composite.c is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute...