CVE-2023-30763

Heap-based overflow in IntelR SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-30763

The CVE-2023-30763 issue concerns a heap-based overflow in Intel SoC Watch based software prior to 2021.1 that could enable privilege escalation with local access. The connected Intel advisory (INTEL-SA-00547) confirms affected products: Intel SoC Watch driver (pre-2021.1) and related components,...

Vim < 9.0.1532 Code Execution

According to its version, the version of Vim installed on the remote host is prior to 9.0.1532. It is, therefore affected by an integer overflow in the regtilde function that can result in a denial of service condition by exhausting available system memory, or heap-based code execution. Note that...

RHEL 9 : gdk-pixbuf2 (RHSA-2023:2216)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2216 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by...

RHEL 9 : libguestfs-winsupport (RHSA-2023:2179)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:2179 advisory. The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and...

Heap overflow

Adobe Substance 3D Painter versions 8.3.0 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-29283

CVE-2023-29283 affects Adobe Substance 3D Painter (versions 8.3.0 and earlier). A heap-based Buffer Overflow occurs in USD file parsing, enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (open malicious file or visit a crafted page). Affected product/...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1858)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-27385

CVE-2023-27385 concerns Omron CX-Drive. Affected: CX-Drive versions V3.01 and earlier. Vulnerability: heap-based buffer overflow (CWE-122) in CX-Drive when a user opens a specially crafted SDD file, potentially allowing arbitrary code execution and/or information disclosure. Root cause: heap over...

Adobe Substance 3D Painter USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Painter. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

Heap overflow

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

Moderate: Red Hat Security Advisory: libguestfs-winsupport security update

An update for libguestfs-winsupport is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1815)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-2744 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Painter versions 8.3.0 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1815)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...

ALSA-2023:2179 Moderate: libguestfs-winsupport security update

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine VM disk images. Security Fixes: ntfs-3g: heap-based buffer overflow in ntfsck CVE-2021-46790 ntfs-3g: crafted NTFS image can cause heap...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1833)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...