CVE-2022-34756

The CVE-2022-34756 affects Schneider Electric Easergy P5 (v01.401.102 and prior) and is caused by a CWE-120 buffer copy without checking input size. This vulnerability can lead to remote code execution or a crash of the device’s HTTPs Web HMI stack. Documented impact is high with a CVSS base scor...

[SECURITY] Fedora 36 Update: clipman-1.6.1-3.fc36

A basic clipboard manager for Wayland, with support for persisting copy buffe rs after an application exits...

The vulnerability of microprogrammed software in industrial switches such as SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M lies in the copying of buffers without checking the size of the input data. This allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software in industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M, SIPL...

CVE-2022-34756

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution or the crash of HTTPs stack which is used for the device Web HMI. Affected Products: Easergy P5 V01.401.102 and prior...

Denial Of Service (DoS)

libdcmtk.so is vulnerable to denial of service. The vulnerability exists due to the improper handle of the string copy property which allows an attacker to crash the system via a maliciously crafted request...

PT-2025-8595

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc2-syzkaller Description A vulnerability has been resolved in the Linux kernel. The issue is related to the use of rcu dereference when rcu read lock is not held, as reported by syzbot. This can cause a...

The vulnerability in the implementation of the copy_info_records_to_user() function in Linux operating systems allows a malicious actor to escalate their privileges or cause service failures.

The vulnerability of the copyinforecordstouser function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions...

The vulnerability of the nxos_file_copy module in the Ansible configuration management system allows a hacker to execute arbitrary commands.

The vulnerability of the nxosfilecopy module in the Ansible configuration management system is related to incorrect external manipulation of the file name or path. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

GSD-2022-1002744 erofs: fix buffer copy overflow of ztailpacking feature

erofs: fix buffer copy overflow of ztailpacking feature This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

Stack overflow

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

UBUNTU-CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2022-33108

CVE-2022-33108 affects XPDF 4.04; the vulnerability is a stack overflow in Object::Copy (object.cc). Exploitation details are not described beyond this, but multiple advisories indicate updated packages are required (e.g., XPDF >= 4.05) to fix these issues. Connected sources corroborate the CV...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2021-41689

DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack...