Ubuntu: Security Advisory (USN-3685-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TP-Link TL-R473G Code Execution

The vulnerability of TP-Link TL-R473G router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets...

Routing Software Code Execution

The vulnerability of the functions parsehellosubtlv, parseihusubtlv, and parseupdatesubtl babeld/message.c of the software tool for implementing networking routing on Unix-like systems is related to the escape of operations outside of the buffer in memory. Exploiting this vulnerability could allo...

Adobe Framemaker Buffer Overflow

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

Adobe Framemaker Buffer Overflow

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

babeld Heap Buffer Overflow DoS

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

babeld Heap Buffer Overflow DoS

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PDF Writing Buffer Overflow Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader are related to the execution of write operations beyond the buffer in memory. Exploiting these vulnerabilities can allow...

Adobe Illustrator Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially created malicious file...

VulnCheck KEV: CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...

Intel Wireless Bluetooth Driver Buffer Overflow Privilege Escalation

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

UEFI Buffer Overflow

The vulnerability of UEFI BIOS in desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Intel Wireless Bluetooth Driver Buffer Overflow

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

Hewlett-Packard SMM Driver Privilege Escalation

The vulnerability of the System Management Mode SMM driver in microprogramming-based EFI BIOS desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerabilit...

Microsoft Edge Heap Buffer Overflow RCE

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Samba SMB1 DoS

The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the fact that the operation values are written outside the buffer in memory during the range checking process. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

web interface for managing Code Execution

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV110W, RV130, RV130W, and RV215W routers stems from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

EcoStruxure Control Expert Buffer Overflow DoS

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

CVE-2022-35928 AES Crypt for Linux Password Security Vulnerability

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...