CVE-2024-38212: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-43453: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-43607: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-43564: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-43589: Heap-based Buffer Overflow

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-43522: Heap-based Buffer Overflow

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2024-43560: Heap-based Buffer Overflow

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability...

CVE-2024-43528: Heap-based Buffer Overflow

Windows Secure Kernel Mode Elevation of Privilege Vulnerability...

CVE-2024-43517: Heap-based Buffer Overflow

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...

CVE-2024-41981: Heap-based Buffer Overflow

A vulnerability has been identified in Simcenter Femap V2306 All versions, Simcenter Femap V2401 All versions, Simcenter Femap V2406 All versions. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted BDF files. This could allow an attacker to execut...

Siemens Simcenter Nastran

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-43527: Heap-based Buffer Overflow

Windows Kernel Elevation of Privilege Vulnerability...

K000141354: Multiple PHP vulnerabilities

Security Advisory Description CVE-2017-7272 PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is recognized, fsockopen will use the port number that is...

CVE-2024-6444: Heap-based Buffer Overflow

No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...

CVE-2024-42415

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library libgsf. A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector...

CVE-2024-42415

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library libgsf. A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector...

CVE-2024-42415

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library libgsf. A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector...

CVE-2024-42415

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library libgsf. A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector...

CVE-2024-42415

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library libgsf. A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector...

CVE-2024-41593

CVE-2024-41593 affects DrayTek Vigor310 devices up to version 4.3.2.6. The vulnerability is a heap-based buffer overflow in the web interface function ft_payload_dns due to a byte sign-extension in the length argument of a memcpy call, enabling remote code execution. Connected sources confirm the...