CVE-2022-33288 Buffer copy without checking the size of input in Core

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information...

CVE-2022-33288

CVE-2022-33288 describes a memory corruption flaw caused by a buffer copy that does not validate input size in Core when issuing an SCM command to retrieve write protection information. The vulnerability is linked to Qualcomm closed‑source components and has high/critical risk ratings across sour...

CVE-2022-33259 Buffer copy without checking the size of input in Modem

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...

CVE-2022-25740 Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

CVE-2022-25678 Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection...

CVE-2022-25678 Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection...

PT-2023-13293 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in Core when sending an SCM command to retrieve write protection information...

The vulnerability of the ff_hevc_put_hevc_qpel_pixels_8_sse function in the h.265 Libde265 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

SUSE CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

GitLab 命令注入漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab Community Edition and GitLab...

CVE-2022-30351

PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does not properly sanitize this information in all cases, causing redacted information, including images and text embedded in the PDF file, to...

DEBIAN-CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

UBUNTU-CVE-2023-26116

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

PT-2023-13007 · Pdfzorro +1 · Pdfzorro +1

Name of the Vulnerable Software and Affected Versions: PDFZorro PDFZorro Online version r20220428 TCPDF version 6.2.5 Description: The issue arises from the improper sanitization of redacted information in PDF files. Despite claims of correctly removing redacted data, the software fails to do so ...

PT-2023-13006 · Avanquest · Pdfescape Online +1

Name of the Vulnerable Software and Affected Versions: Avanquest Software RAD PDF PDFEscape Online version 3.19.2.2 Description: The PDFEscape Online tool has a "white out" functionality for redacting images, text, and other graphics from a PDF document. However, this mechanism does not remove...

CVE-2022-2825

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lac...

Rocket Software UniData 和 UniVerse 安全漏洞

Rocket Software UniVerse and Rocket Software UniData are both products of Rocket Software, Inc. Rocket Software UniVerse is a suite of database management and support software now owned by Rocket Software. Software UniData is a MultiValue application platform. Rocket Software UniData is a...

PT-2023-2330 · Rocket · Universe +1

Name of the Vulnerable Software and Affected Versions: Rocket Software UniData versions prior to 8.2.4 build 3003 Rocket Software UniVerse versions prior to 11.3.5 build 1001 Rocket Software UniVerse versions prior to 12.2.1 build 2002 Description: The issue is related to a buffer overflow in an...

Veeam Backup for Microsoft 365 Backup Copy May Fail to Transfer Microsoft Teams Channel Messages

Challenge Issue Summary In certain situations, when using a Backup Copy Job with an Archive Appliance to copy data from a Backup Job that was set up solely to protect Teams data via Teams Export APIs, the transfer of Teams channel messages may fail. Requirements for the Issue to Occur This issue...

DEBIAN-CVE-2023-1078

A flaw was found in the Linux Kernel in RDS Reliable Datagram Sockets protocol. The rdsrmzerocopycallback uses listentry on the head of a list causing a type confusion. Local user can trigger this with rdsmessageput. Type confusion leads to struct rdsmsgzcopyinfo info actually points to something...