CVE-2023-21640 Buffer Copy Without Checking Size of Input in Linux

Memory corruption in Linux when the file upload API is called with parameters having large buffer...

CVE-2023-21639 Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing svamodelserializer using memory size passed by HIDL client...

CVE-2023-21639 Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing svamodelserializer using memory size passed by HIDL client...

CVE-2023-21635 Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

CVE-2023-21639: Buffer Copy without Checking Size of Input

Memory corruption in Audio while processing svamodelserializer using memory size passed by HIDL client...

WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Content Copy Protection & No Right Click Type Plugin Vulnerable versions = 3.5.5 Fixed in 3.5.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-36678 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 91b64bb0fc8d Credits LEE SE...

CVE-2023-21640: Buffer Copy without Checking Size of Input

Memory corruption in Linux when the file upload API is called with parameters having large buffer...

BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising

Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. "Malicious actors used malvertising to distribute a piece of malware via cloned webpages of legitimate organizations," Tre...

Failed to paste the copied content from client to Linux VDA

Copy content from a client machine to a Linux desktop failed randomly, nothing will be pasted into the Linux desktop. Meanwhile, this issue is not observed in a Windows VDA accessed from the same client machine. Copy content from a client machine, e.g. text. Move the mouse to the Linux desktop an...

ghostscript:gs_device_eps2write_fuzzer: Memcpy-param-overlap in pdfi_copy_truetype_font

Detailed Report: https://oss-fuzz.com/testcase?key=5951139280191488 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceeps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62d000066d18,0x62d000069d18 and...

Fortinet FortiNAC command injection vulnerability

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. Fortinet FortiNAC suffers from a command injection vulnerability that stems from the presence of a command injection...

CVE-2015-20109: Buffer Copy without Checking Size of Input

endpattern called from internalfnmatch in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash, as demonstrated by use of the fnmatch library function with the ! pattern. NOTE: this is not the same as CVE-2015-8984...

libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the TIFFmemcpy function in libtiff/tifunix.c when called by functions in tools/tiffcrop.c, resulting in a Denial of Service and limited information...

libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds write in the TIFFmemcpy function in libtiff/tifunix.c when called by functions in tools/tiffcrop.c, resulting in a Denial of Service and limited data modification...

CVE-2022-48497: Buffer Copy without Checking Size of Input

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48490: Buffer Copy without Checking Size of Input

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

CVE-2022-48501: Buffer Copy without Checking Size of Input

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability...

WordPress Envato 2.0.7 Backup Disclosure

==================================================================================================================================== | Title : WordPress - Envato Plugin 2.0.7 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firef...

Security Bulletin: Vulnerabilities in Oracle Java SE might affect IBM Spectrum Copy Data Management (CVE-2023-21968, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21937, CVE-2023-21930)

Summary IBM Spectrum Copy Data Management can be affected by vulnerabilities in Oracle Java SE. Vulnerabilities include allowing an unauthenticated and remote attacker to cause high confidentiality impact, high integrity impact, and high availability impact, as described by the CVEs in the...

Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management

Summary IBM Spectrum Copy Data Management can be affected by vulnerabilities in Golang Go, Python, PostgreSQL and cURL libcurl. Vulnerabilities include viewing arbitrary files on the system, consuming all available resources, causing the system to crash, obtaining sensitive information, an...