6990 matches found
Moxa VPORT Buffer Overflow DoS
The vulnerability of Moxa VPORT 06EC-2V microprogrammed software for IP cameras and the Moxa VPort 461A microprogrammed software for video encoders lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
Siemens PADS Standard/Plus Viewer Buffer Overflow Unauthorized Access
The vulnerability of the Siemens PADS Standard/Plus Viewer application relates to reading data beyond the buffer in memory during the processing of PCB file formats. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vim Buffer Overflow DoS
The vulnerability of the Vim text editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
EulerOS 2.0 SP8 : squid (EulerOS-SA-2022-2807)
According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This update for squid fixes the following issues: Updated squid to version 5.7: - CVE-2022-41317: Fixed exposure of sensitive information in cache...
MikroTik SNMP Code Execution
The vulnerability in the implementation of the SNMP Simple Network Management Protocol protocol in the RouterOS operating system of MikroTik routers lies in the ability to read data beyond the buffer boundaries in memory during the processing of the u32id key. Exploiting this vulnerability allows...
RouterOS Wi-Fi Hotspot Code Execution
The vulnerability of the Wi-Fi hotspot implementation in the RouterOS operating system of MikroTik lies in the ability to read data beyond the buffer in memory during the processing of the u32id key. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending...
Cisco Adaptive Security Appliances TLS DoS
The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliances ASA and Firepower Threat Defense FTD of the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series is related to the copying of...
Adobe Acrobat ImageConversion.api Heap Buffer Overflow Information Disclosure
The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data outside of the buffer in memory...
OESA-2022-2116 dbus-broker security update
Security Fixes: An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.CVE-2022-31212 An issue was discovered in dbus-broker before 31. Multiple...
Acrobat DLL Heap Buffer Overflow Information Disclosure
The vulnerability of the Acrobat.dll executable files used by PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data beyond the buffer in memory. Exploitin...
Acrobat DLL Heap Buffer Overflow Information Disclosure
The vulnerability of the Acrobat.dll executable files used by PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data beyond the buffer in memory. Exploitin...
FreeRDP USB Redirection Channel Unauthorized Access
The vulnerability of the USB redirection channel urbdrc in the FreeRDP remote desktop protocol is related to the issue where operations are performed outside the buffer during data input length checking. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
FreeType Heap Buffer Overflow DoS
The vulnerability of the FTRequestSize function in the FreeType library relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
sudo: Heap-Based Buffer Overread
Background sudo allows a system administrator to give users the ability to run commands as other users. Description In certain password input handling, sudo incorrectly assumes the password input is at least nine bytes in size, leading to a heap buffer overread. Impact In the worst case, the heap...
GLSA-202211-08 : sudo: Heap-Based Buffer Overread
The remote host is affected by the vulnerability described in GLSA-202211-08 sudo: Heap-Based Buffer Overread - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can...
Read one byte past a buffer when normalizing Unicode
...
zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field
A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader...
httpd: mod_lua: Information disclosure with websockets
A flaw was found in the modlua module of httpd. The data returned by the wsread function may point past the end of the storage allocated for the buffer, resulting in information disclosure...
PT-2022-21754 · Qualcomm · Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN firmware. This occurs while the firmware is processing the PPE threshold. The...
PT-2022-21753 · Qualcomm · Snapdragon Mobile +3
Name of the Vulnerable Software and Affected Versions: Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Mobile affected versions not specified Snapdragon Wired Infrastructure and Networking affected versions not specified...