19932 matches found
D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...
Oracle Linux 5 : ELSA-2012-0690-1: / kernel (ELSA-2012-06901)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-06901 advisory. - The sockallocsendpskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local user...
Oracle Linux 7 : audiofile (ELSA-2020-3877)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3877 advisory. - Apply security patches. CVE-2018-17095, CVE-2018-13440 - Merge upstream pull requests 42,43,44 from Agostino Sarubbo to fix security issues...
Oracle Linux 6 : cups (ELSA-2011-1635)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1635 advisory. 1.4.2-44 - Init script should source /etc/sysconfig/cups bug 744791 1.4.2-43 - The scheduler might leave old job data files in the spool directory STR 3795, STR...
Oracle Linux 7 : qemu (ELSA-2019-4556)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4556 advisory. - A flaw was found in qemu Media Transfer Protocol MTP before version 3.1.0. A path traversal in the in usbmtpwritedata function in hw/usb/dev-mtp.c du...
Oracle Linux 8 : container-tools:ol8 (ELSA-2019-3403)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3403 advisory. - ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...
Heap-based Buffer Overflow
libzbar.so is vulnerable to Heap-based Buffer Overflow. A heap-based buffer overflow in the lookupsequence function allows an attacker to create a specially crafted QR code that, when scanned, could lead to information disclosure or arbitrary code execution...
Heap-based Buffer Overflow
libzbar.so is vulnerable to Heap-based Buffer Overflow. A heap-based buffer overflow in the qrreadermatchcenters function allows an attacker to create a specially crafted QR code that, when scanned, could lead to information disclosure or arbitrary code execution...
CVE-2023-4781
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873...
CVE-2023-4781
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873...
Heap-based Buffer Overflow
libgpac.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused by a defect in a aviread function of in avilib.c. An attacker can exploit this vulnerability to mount Denial Of Service DOS attack...
SUSE CVE-2023-4751
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331...
Huawei EulerOS: Security Advisory for lua (EulerOS-SA-2023-2697)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2633)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: curl
Issue Overview: Integer overflow vulnerability in tooloperate.c in curl 7.65.2 via crafted value as the retry delay. CVE-2020-19909 libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before i...
ImageMagick 6.0 < 6.9.11-0, 7.0 < 7.0.10-0 Heap-based Buffer Overflow DoS
The remote Windows host has a version of ImageMagick installed that is 6.0 prior to 6.9.11=0 or 7.0 prior to 7.0.10-0. It is, therefore, affected by heap-based buffer overflow vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Heap overflow
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331...
CVE-2023-4751 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331...
