CVE-2023-31031: Heap-based Buffer Overflow

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2024-21594: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

CVE-2023-50671

CVE-2023-50671 affects exiftags 1.01, where the function nikon_prop1 in nikon.c triggers a heap-based buffer overflow (write of size 28) due to snprintf writing to an unexpected address. Multiple sources (NVD, Red Hat, OSV, UBUNTU OSV, Debian OSV, PRION, and Nessus-derived entries) consistently d...

Ivanti Avalanche WLInfoRailService Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLInfoRailService. The issue results from the lack of proper validation of the leng...

CVE-2024-21337: Heap-based Buffer Overflow

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-50671: Out-of-bounds Write

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

Oracle Linux 8 : pixman (ELSA-2024-0131)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0131 advisory. 0.38.4-3 - Security fix for CVE-2022-44638 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

CVE-2023-50671

In exiftags 1.01, nikonprop1 in nikon.c has a heap-based buffer overflow write of size 28 because snprintf can write to an unexpected address...

CVE-2023-48263: Heap-based Buffer Overflow

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service DoS attack or, possibly, obtain Remote Code Execution RCE via a crafted network request...

CVE-2023-37294 Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2023-49121

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

Heap overflow

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2023-49123

Solid Edge SE2023 is affected by CVE-2023-49123: a heap-based buffer overflow while parsing specially crafted PAR files can lead to code execution in the current process. Affected products: Solid Edge SE2023 (all versions

CVE-2023-49122

Solid Edge SE2023 (all versions before V223.0 Update 10) is affected by a heap-based buffer overflow while parsing specially crafted PAR files, which could allow code execution in the current process. The issue, CVE-2023-49122, is documented across multiple sources (including NVD and Red Hat CVE ...

CVE-2023-49122

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2023-49122: Heap-based Buffer Overflow

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2023-49121: Heap-based Buffer Overflow

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2023-37295: Heap-based Buffer Overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

Siemens Solid Edge

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...