6372 matches found
CVE-2022-3178
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
UBUNTU-CVE-2022-3178
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.1.0-DEV, which can be exploited by an attacker to cause a buffer over-read...
AZL-10925 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2
cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...
DEBIAN-CVE-2022-40320
cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...
AZL-34910 CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2
cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...
Buffer Over Read in gf_utf8_wcslen
Description Buffer Over Read in function gfutf8wcslen at gpac/src/utils/utf.c:442 . gpac version git log commit fc4749f9ce8d6ddf50d1f1104366cdacede14d33 grafted, HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Mon Aug 1 06:44:34 2022 -0700 fix quickjs build on osx 10.12 222...
The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the fact that operations outside the buffer are allowed in memory when processing Collab objects, allowing an attacker to execute arbitrary code.
The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the fact that operations may go beyond the buffer in memory when processing Collab objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malware fil...
LibTIFF 缓冲区错误漏洞
LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from a security vulnerability that stems from the lack of proper validation of user-supplied data by extractImageSection...
ALPINE-CVE-2019-15167
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463...
CVE-2019-15167
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463...
OESA-2022-1866 redis6 security update
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
OESA-2022-1865 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
UBUNTU-CVE-2020-27796
A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
UBUNTU-CVE-2020-27800
A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems allows a perpetrator to execute arbitrary code with root privileges or cause a service failure.
The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code with root privileges or cause service failures...
The vulnerability of the HCI interface, which operates on the Modbus TCP protocol, and the programmable logic controllers Hitachi Energy RTU500, allows a intruder to trigger a service failure or cause the device to restart.
The vulnerability of the HCI interface, which operates on the Modbus TCP protocol, and the Hitachi Energy RTU500 programmable logic controllers is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or trigg...
The vulnerability of the microprogramming software of the POWER METER SICAM Q100 lies in the reading of data beyond the buffer in memory, allowing an intruder to execute arbitrary code.
The vulnerability of the microprogramming software of the POWER METER SICAM Q100 relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the bpf_prog_test_run_skb function (test_run.c) in the Android operating system’s kernel allows a hacker to disclose sensitive information that should be protected.
The vulnerability of the bpfprogtestrunskb function testrun.c in the Android operating system stems from reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...
PT-2022-23952 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...