CLSA-2023-1692110840 Fix CVE(s): CVE-2018-7409

SECURITY UPDATE: Fix buffer overflow - debian/patch/CVE-2018-7409: fix unicodetoansicopy, don't include NUL-terminator in length in unicodetoansialloc, make sure that the error handling doesn't overrun the buffer - CVE-2018-7409...

UBUNTU-CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

GNU Inetutils 安全漏洞

GNU Inetutils is a collection of network tools from the GNU Project that contains common network management programs such as traceroute, hostname, ifconfig, and others. The toolset is mainly used for functions such as network diagnostics, configuration and system information query. An elevation o...

The vulnerability of the copy function for essential data provided by the supplier to business partners of the SAP Supplier Relationship Management application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the copy function for the supplier’s main data for application partners of SAP Supplier Relationship Management relates to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access...

CVE-2023-36482

An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...

CVE-2023-36482

An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...

Code injection

An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...

CVE-2022-40510

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder...

Memory corruption

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder...

CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL

Memory corruption in QESL while processing payload from external ESL device to firmware...

CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL

Memory corruption in QESL while processing payload from external ESL device to firmware...

CVE-2023-21649 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command...

CVE-2022-40510 Buffer copy without checking size of input in Audio.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder...

CVE-2023-36482

CVE-2023-36482 affects Samsung NFC implementations (S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, S3NRN82). The underlying issue is a buffer copy operation performed without validating input size, which can cause the NFC service to restart. The NVD entry reports a CVSSv3.1 base score of 4.3 (Medium) with a...

PT-2023-13800 · Qualcomm · Snapdragon +183

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to a buffer copy without checking the size of the input in Audio while a voice call is made...

CVE-2023-36482

An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...

CVE-2023-36482

An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart...

CVE-2023-36678

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin = 3.5.5 versions...

CVE-2023-36678

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP-buy WP Content Copy Protection & No Right Click plugin = 3.5.5 versions...

CVE-2023-36678

CVE-2023-36678 affects the WordPress plugin WP Content Copy Protection & No Right Click up to version 3.5.5. It is an authenticated Stored XSS vulnerability (admin+ required) through the plugin, with low impact to confidentiality/integrity and no impact to availability per the cited sources. A fi...