947 matches found
GNU SASL 缓冲区错误漏洞
GNU SASL is a GNU community implementation of the Simple Authentication and Security Layer SASL framework and some common SASL mechanisms. A security vulnerability exists in GNU SASL versions prior to 2.0.1 that stems from. Server-side out-of-bounds reads to maliciously authenticated GSS-API...
Foxit PDF Reader 缓冲区错误漏洞
Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable to information disclosure, which can be exploited by attackers to obtain sensitive information...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a buffer error vulnerability that stems from the kernel writing out-of-bounds to memory when malicious data is sent to the kernel via ioctl cmd...
Autodesk AutoCAD 缓冲区错误漏洞
Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from a boundary condition when parsing a PRT file. A remote attacker can create a specially crafted file and trick a...
多款Schneider Electric产品缓冲区错误漏洞
The Schneider Electric OPC UA Modicon Communication Module and the Schneider Electric X80 advanced RTU Communication Module are both products of the French company Schneider Electric. The Schneider Electric OPC UA Modicon Communication Module is an Ethernet communication module with an embedded O...
DENX U-Boot 缓冲区错误漏洞
DENX U-Boot is a content management system. A security vulnerability exists in versions prior to DENX U-Boot v2022.07, which stems from a flaw in the metadata read process, and U-Boot's squash file system contains a heap-based buffer overflow vulnerability...
Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞
PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.A stack corruption vulnerability exists in Siemens PADS Standard/Plus Viewer, which can be exploited by an attacker to disclose information in the context of the curre...
CVE-2022-31117
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...
EtherNet/IP Adapter 和 EtherNet/IP Scanner 缓冲区错误漏洞
The EtherNet/IP Adapter is a development kit and tool from Pyramid Solutions.EtherNet/IP Scanner is a scanner software. It provides I/O server and I/O client, message server and message client functionality, and an application programming interface. A buffer error vulnerability exists in the...
Schneider Electric IGSS Data Server 缓冲区错误漏洞
The Schneider Electric IGSS Data Server is a data server for the Interactive Graphics Scada System from Schneider Electric France. A buffer error vulnerability exists in versions prior to Schneider Electric IGSS Data Server 15.0.0.22140, which stems from an application boundary error. A remote...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2, which stems from the presence of buffer out-of-bounds reads...
FFmpeg 缓冲区错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg ffinitbufferinfo function, which can be exploited by an attacker to cause a denial of service attack...
FFmpeg 缓冲区错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in FFmpeg HEVC video decoder, which can be exploited by attackers to cause a denial of service attack...
FFmpeg 缓冲区错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg intrapred function, which can be exploited by an attacker to cause a denial of service attack...
CVE-2021-42735
Adobe Photoshop version 22.5.1 and earlier versions is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...
Adobe Bridge 缓冲区错误漏洞
Adobe Bridge is a file viewer from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe Bridge, which could be exploited to execute arbitrary code in the context of the current user...
Adobe Illustrator 缓冲区错误漏洞
An out-of-bounds write vulnerability exists in Adobe Illustrator, a vector-based image creation software from Adobe. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Adobe Animate 缓冲区错误漏洞
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an out-of-bounds write vulnerability. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
Fixed CVEs in vim: CVE-2022-0319, CVE-2022-1886, CVE-2022-1898, CVE-2022-1851
CVE-2022-0319: correct end of Visual area when entering another buffer - CVE-2022-1851: fix invalid cursor position after text formatting - CVE-2022-1886: fix access before start of text with a put command - CVE-2022-1898: fix using freed memory with 'd'...