K16907: Apache HTTPD vulnerability CVE-2011-3607

Security Advisory Description Integer overflow in the appregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the modsetenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, ...

K56138200: PHP vulnerability CVE-2016-3078

Security Advisory Description Multiple integer overflows in phpzip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted call to 1 getFromIndex or 2...

K15478: PHP vulnerability CVE-2012-2386

Security Advisory Description Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers...

K59722044: PHP vulnerabilities CVE-2016-1903 and CVE-2016-1904

Security Advisory Description CVE-2016-1903 The gdImageRotateInterpolated function in ext/gd/libgd/gdinterpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and...

CVE-2023-22236 Adobe Animate Heap-based Buffer Overflow Arbitrary code execution

Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2023-22236: Heap-based Buffer Overflow

Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

Fedora 36 : vim (2023-93fb5b08eb)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-93fb5b08eb advisory. 2169641 - Syntax highlight for sh files broken ---- The newest upstream commit Security fixes for CVE-2022-47024, CVE-2023-0433 Tenable has extracte...

CVE-2023-23782

A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands...

CVE-2023-23782

Fortinet FortiWeb is affected by a heap-based buffer overflow in the CLI that can be exploited by an authenticated attacker to escalate privileges and potentially execute arbitrary code. The CVE-2023-23782 description covers FortiWeb versions 7.0.0–7.0.1, 6.3.0–6.3.19, and all 6.4, 6.2, and 6.1 v...

Adobe Animate Code Execution Vulnerabilities (APSB23-15) - Windows

The host is missing an important security update according to Adobe Animate February 2023 update. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2023-23782: Heap-based Buffer Overflow

A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands...

CVE-2023-0866: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-0866

CVE-2023-0866 concerns the GPAC multimedia framework (gpac/gpac) prior to 2.3.0-DEV, with a heap-based buffer overflow vulnerability. The connected sources confirm the issue affects GPAC and describe the underlying flaw as a heap-based overflow. Debian advisories (DSA-5411-1) and related OSS/OSV ...

CVE-2023-0866 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-0841

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2023-0841

GPAC 2.3-DEV-rev40-g3602a5ded is affected by a vulnerability in the mp3_dmx_process function (filters/reframe_mp3.c) that causes a heap-based buffer overflow. The issue is exploitable remotely, with public disclosure of exploits. Affected component appears to be the mp3 demuxing path inside GPAC....

CVE-2023-0841

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2023-0841

Removed by vendor...

CVE-2023-0841: Heap-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...

Out-of-bounds Write

freedroidrpg:sid is vulnerable to Out-of-bounds Write. vulnerability in 'map.c' within 'FreedroidRPG 1.0rc2' copies data from a file into a fixed size buffer without verifying its size. this can lead to heap-based buffer overflow...