PT-2023-16069 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to sign conversion problems in the kernel mode layer of the NVIDIA GPU Display Driver for Linux, where casting an unsigned primitive to sign...

NVIDIA GPU Display Driver for Linux 安全漏洞

NVIDIA GPU Display Driver for Linux is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in Linux systems. A security vulnerability exists in NVIDIA GPU Display Driver, which stems from a symbol conversion issue that could lead to a denial of...

USN-5990-1 musl vulnerabilities

It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. CVE-2019-14697 It was...

Fedora: Security Advisory for python-cairosvg (FEDORA-2023-e4a4ea43d8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the MagickCore/property.c component of the console-based image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MagickCore/property.c component in the console-based image editing tool ImageMagick is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Google Chrome browser’s CSS component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome browser’s CSS component is related to errors in data type conversion. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

The vulnerability in the AudioWorklet interface of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the AudioWorklet interface in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2023-17845 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is caused by a logic error in the code of EUTRAN LCS ConvertLCS MOLRReq in LPP CommonUtil.c, leading to a possible out of bounds write. This could result in remote code execution with System execution...

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

Design/Logic Flaw

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-43663

Summary: CVE-2022-43663 is an integer conversion vulnerability in WellinTech KingHistorian 35.01.00.05, affecting the RecvPacket function of SORBAx64.dll and capable of causing a buffer overflow via a specially crafted network packet. Cisco Talos details the underlying issue in the RecvPacket han...

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

WellinTech KingHistorian 代码问题漏洞

WellinTech KingHistorian is a tool for data collection and analysis from WellinTech. A security vulnerability exists in WellinTech KingHistorian version 35.01.00.05, which stems from the presence of an integer conversion vulnerability that could be exploited by an attacker to cause a buffer...

WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability

Talos Vulnerability Report TALOS-2022-1674 WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability March 20, 2023 CVE Number CVE-2022-43663 SUMMARY An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian...

CairoSVG improperly processes SVG files loaded from external resources

When CairoSVG processes an SVG file, it can make requests to the inner host and different outside hosts. When CairoSVG processes an SVG file, it can send requests to external hosts and wait for a response from the external server after a successful TCP handshake. This will cause the server to han...

Namespace.sol fuse() function incorrectly calculates fused bytes

Lines of code Vulnerability details Impact The fuse function in Namespace.sol incorrectly calculates fused bytes. The first parameter to the characterToUnicodeBytes function is font class, which is always set to 0. This leads to an incorrect calculation of the tokenToName value, resulting in a...

CBL Mariner 2.0 Security Update: curl (CVE-2022-42916)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42916 advisory. - In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS...

PT-2023-2190 · Jenkins · Jenkins Convert To Pipeline Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Convert To Pipeline Plugin versions 1.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to create a Pipeline based on a Freestyle project, potentially leading to remote code execution RCE. The...