Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O StorageSecurityCommandDxe, which arises fr...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. Contiki-NG suffers from a security vulnerability that stems from its BLE L2CAP module allowing an attacker to achieve an out-of-bounds read...

NGINX JavaScript 缓冲区错误漏洞

NGINX JavaScript is an extension to the NGINX open source. A buffer error vulnerability exists in NGINX JavaScript versions 0.7.2 through 0.7.4, which stems from a segmentation violation in the njsscopevalidvalue function in njsscope.h. The vulnerability is caused by the use of the...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS, which arises from the handling of maliciously crafted images that may result in arbitrary code execution...

Synology DiskStation Manager 缓冲区错误漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology, a Chinese company. The operating system manages information such as data, files, photos, music, etc. The operating system is not compatible with Synology DiskStation Manager DSM. A buffer...

Autodesk FBX-SDK 缓冲区错误漏洞

Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk, Inc. that is primarily used to convert existing content to FBX format. A security vulnerability exists in Autodesk FBX-SDK 2020 and prior versions, which stems from the presence of an out-of-bounds read...

Juniper Networks Junos OS 缓冲区错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. No information about this vulnerability is...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer error vulnerability exists in versions prior to FreeRDP 2.8.1, which stems from the fact that all FreeRDP-based clients may read uninitialized data when using the /video command line switch...

Adobe ColdFusion 缓冲区错误漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. Adobe ColdFusion has a security vulnerability. An attacker can exploit the vulnerability to execute...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. A buffer error vulnerability exists in the Linux kernel that stems from an out-of-bounds read in the fibnhmatch function in the net/ipv4/fibsemantics.c file of the IPv4 Handler component...

Apache Commons JXPath 缓冲区错误漏洞

Apache Commons JXPath is a Java-based implementation of XPath 1.0 from the Apache Foundation. Apache Commons JXPath suffers from a buffer error vulnerability that stems from a parser running on user-supplied input that allows an attacker to submit special data resulting in a denial of service due...

Omron CX-Programmer 缓冲区错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A buffer error vulnerability exists in Omron CX-Programmer version 9.78 and prior versions, which can be exploited by an attacker to achieve arbitrary code execution via an out-of-bounds write...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer error vulnerability exists in Huawei HarmonyOS versions prior to 2.0, which stems from a lack of length checking vulnerability in the HWKEYMASTER...

Autodesk Moldflow 缓冲区错误漏洞

Autodesk Moldflow is a software simulation from the American company Autodesk. It can show how the resin fills the mold during the injection molding process. A buffer error vulnerability exists in versions prior to Autodesk Moldflow 2023, which stems from a memory corruption that may occur when t...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer error vulnerability exists in Bento4 v1.6.0-639, which stems from a heap overflow in the AP4BitReader::ReadBit method of the mp4mux component...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A buffer error vulnerability exists in Autodesk AutoCAD that stems from parsing maliciously crafted XB, CATIA, and PDF files can be used to write to a buffer that exceeds the allocated buffer,...

XPDF 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, including a text extractor, image converter, HTML converter and more. A buffer error vulnerability exists in XPDF version 4.04, which stems from a crash in the XRef::fetchint, int, Object, int function in xpdf/XRef.cc...

Dell SmartFabric OS10 缓冲区错误漏洞

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell, USA. A security vulnerability exists in Dell SmartFabric OS10 versions 10.5.1.x, 10.5.2.x, and 10.5.3.x. The vulnerability stems from the fact that an attacker can cause a system crash by running a specific security...

Grandstream GSD3710 缓冲区错误漏洞

The Grandstream GSD3710 is an HD video access control system from Grandstream. A security vulnerability exists in the Grandstream GSD3710 version 1.0.11.13, which stems from not checking the length of parameters before using the strcopy command, and can be exploited by an attacker to execute a...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A security vulnerability exists in SWFTools that stems from a segmentation violation in the convertgfxline location of /gfxpoly/convert.c. The vulnerability is caused by an error in the /gfxpoly/convert.c location. No...