CVE-2022-30540

The CVE-2022-30540 entry relates to Horner Automation Cscape Csfont. The vulnerability is a heap-based buffer overflow via an uninitialized pointer, which could allow an attacker to execute arbitrary code. Affected product: Cscape Csfont (versions up to 9.90 SP5). Impact is high (C:H/I:H/A:H) per...

CVE-2022-30540 Horner Automation Cscape Csfont

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code...

Debian DSA-5155-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5155 advisory. The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-26700 ryuzaki discovered that processing maliciously crafted web content...

CVE-2022-1942

CVE-2022-1942 is a vim/vim vulnerability (affecting Vim prior to 8.2) where a heap-based buffer overflow can be triggered by opening a command-line window from a substitute expression. Debian LTS advisory DLA-3204-1 (vim 2:8.1.0875-5+deb10u4) and Debian 11/NVD entries categorize it as a heap-base...

Ubuntu 16.04 ESM : NTFS-3G vulnerability (USN-5452-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5452-1 advisory. It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use...

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

CVE-2022-31782

CVE-2022-31782 affects ftbench.c in FreeType Demo Programs up to version 2.12.1, causing a heap-based buffer overflow. The connected advisories enumerate this CVE in EulerOS/Astra Linux contexts, but no exploit details or patch/version information is provided in the documents.

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

Security Bulletin: PowerVC installation on RHEL is vulnerable to MariaDB with CVE-2021-46669, CVE-2022-24048, MariaDB - 219814, MariaDB - 219815, CVE-2022-24050, CVE-2022-24052

Summary Summary guidance: MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used and it is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the processing of SQL queries. The specific flaw exists...

CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22...

CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...

CVE-2022-30789

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no brutef...

EulerOS 2.0 SP3 : opensc (EulerOS-SA-2022-1752)

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...

CVE-2022-30789

NTFS-3G contains a heap-based buffer overflow in ntfs_check_log_client_array (through 2021.8.22). Affected: NTFS-3G implementations shipping NTFS support; root cause is a boundary/overflow issue when handling NTFS image data. Impact is reported as high (confidentiality, integrity, and availabilit...

CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2022-1706)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds flaw was found in binutils stabs functionality. The attack needs to be initiated locally where an attacker could convince a...

SUSE SLES12 Security Update : fribidi (SUSE-SU-2022:1845-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1845-1 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted fil...

EulerOS 2.0 SP3 : vim (EulerOS-SA-2022-1769)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3984, CVE-2021-4019, CVE-2022-0213 - vim is vulnerable to Use After Free CVE-2021-4069,...