655 matches found
The vulnerability of Firefox browser, related to copying buffers without checking the size of the input data, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the Firefox browser is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...
February 10, 2015 update for SharePoint Server 2010 (KB2899589)
February 10, 2015 update for SharePoint Server 2010 KB2899589 This article describes update KB2899589 for Microsoft SharePoint Server 2010 that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes the following issue: Assume that you open an Excel workbo...
February 10, 2015 update for SharePoint Server 2010 Excel Web App (KB2899588)
February 10, 2015 update for SharePoint Server 2010 Excel Web App KB2899588 This article describes update KB2899588 for Microsoft SharePoint Server 2010 Excel Web App that was released on February 10, 2015. This update has a prerequisite. Improvements and Fixes Fixes the following issue: Assume...
CVE-2019-10556
Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...
The vulnerability in browsers Firefox and Firefox ESR arises from copying buffers without checking the size of the input data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of Firefox browsers, including Firefox ESR, is related to a copying error from memory without checking its size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
CVE-2019-11249
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is...
CVE-2019-11246
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is...
Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method
The Mozilla Foundation Security Advisory describes this flaw as: When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially...
CVE-2020-3153
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...
Mozilla: CSS sanitization does not escape HTML tags
When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...
Security Bulletin: A security vulnerability has been identified in Kubernetes shipped with PowerAI Vision
Summary Multiple vulnerabilities CVE-2019-11249, CVE-2019-11247 found in Kubernetes package. Vulnerability Details CVEID: CVE-2019-11249 DESCRIPTION: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the...
CVE-2019-19977
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...
CVE-2019-19977
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...
Stack overflow
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...
CVE-2019-19977
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...
CVE-2019-19977
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...
Security Bulletin: Vulnerabilities in Kubernetes affects IBM Watson Studio Local
Summary Vulnerabilities in Kubernetes affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-11249 DESCRIPTION: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a...
UBUNTU-CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
SDL: not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950
A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application tha...