12344 matches found
PT-2023-21736 · Unknown · Hl7 Fhir Core Libraries
Name of the Vulnerable Software and Affected Versions: HL7 FHIR Core Libraries versions prior to 5.6.106 Description: The issue allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the...
PT-2025-53179
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue exists in the Linux kernel's scsi subsystem, specifically within the lpfc debugfs lockstat write function. A static code analysis identified that copy from user...
CVE-2022-33278 Buffer copy without checking the size of input in HLOS
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity...
CVE-2022-33278: Buffer Copy without Checking Size of Input
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity...
CVE-2022-25655: Buffer Copy without Checking Size of Input
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload...
PT-2023-13283 · Qualcomm · Snapdragon +110
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to a buffer copy without checking the size of the input in HLOS. This occurs when the input message size...
CVE-2022-40540: Buffer Copy without Checking Size of Input
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel...
LibRaw Heap Buffer Overflow DoS
The vulnerability of the LibRaw::adobecopypixel function in the LibRaw image processing library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a attacker to trigger a service denial using a specially...
kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution...
SUSE CVE-2023-0996
There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...
OESA-2023-1127 xorg-x11-server security update
X.Org X11 X server Security Fixes: A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on...
K54336216: SCP vulnerability CVE-2019-6679
Security Advisory Description The system does not properly enforce the access controls for the scp.whitelist and scp.blacklist files when paths are symbolic links symlinks. This allows authenticated users with Secure Copy SCP protocol access to overwrite certain configuration files that would...
K82518062: BIG-IP SCP vulnerability CVE-2020-5906
Security Advisory Description The BIG-IP system does not properly enforce the access controls for the scp.blacklist files. This allows Admin and Resource Admin users with Secure Copy SCP protocol access to read and overwrite blacklisted files via SCP. CVE-2020-5906 Note : F5 is working to elimina...
K17526: NTP vulnerability CVE-2015-7848
Security Advisory Description An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed b...
GHSA-MV37-XRMC-HF64 Microweber Cross-site Scripting vulnerability
Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted i...
GHSA-7H4W-6P98-R3WX textAngular Cross-site Scripting vulnerability
textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...
Cross site scripting
Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. Version 3.8.7 contains a patch for this issue...
Cross site scripting
textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting XSS. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no known patches...
OESA-2023-1110 c-ares security update
Security Fixes: In aressetsortlist, it calls configsortlist..., sortstr to parse the input str and initialize a sortlist configuration. However, aressetsortlist has not any checks about the validity of the input str. It is very easy to create an arbitrary length stack overflow with the unchecked...
PT-2025-38038
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mpi3mr get all tgt info function contains several issues. The function incorrectly calculates the valid entry length in alltgt info by assuming an incorrect size for the header of th...