20293 matches found
CVE-2020-13545
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...
CVE-2020-13545
CVE-2020-13545 affects SoftMaker Office TextMaker 2021. The TALOS analysis details a signed/unsigned conversion issue in TextMaker’s document parsing that can cause heap-based memory corruption when loading a crafted TextMaker Document (.tmd). The root cause involves miscalculation of a length us...
CVE-2020-13545
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...
Buffer Overflow
AdPlug is vulnerable to buffer overflow. Lack of validations in 'CmtkLoader::load' in 'mtk.cpp' allows remote attackers to cause multiple heap-based buffer overflows...
Information Disclosure
qemu is vulnerable to information disclosure. The vulnerability exists in iscsiaioioctlcb of block/iscsi.c through a heap-based buffer over-read...
Debian DLA-2513-1 : p11-kit security update
Several memory safety issues affecting the RPC protocol were fixed in p11-kit, a library providing a way to load and enumerate PKCS11 modules. CVE-2020-29361 Multiple integer overflows CVE-2020-29362 Heap-based buffer over-read For Debian 9 stretch, these problems have been fixed in version...
EulerOS Virtualization for ARM 64 3.0.2.0 : jasker (EulerOS-SA-2021-1044)
According to the versions of the jasker packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in JasPer 2.0.14. There is an access violation in the function jasimagereadcmpt in...
EulerOS Virtualization for ARM 64 3.0.2.0 : augeas (EulerOS-SA-2021-1042)
According to the versions of the augeas package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The Opus codec is designed for interactive speech and audio transmission over the Internet. It is designed by the IETF...
Softmaker Office Buffer Error Vulnerability
Softmaker Office is a multi-platform supported office software from the German company Softmaker. The software is used for word processing, spreadsheets, presentation design, and can also be scripted, and supports a wide range of common Office file formats, as well as a variety of internal format...
Debian: Security Advisory (DLA-2513-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SoftMaker Office TextMaker Document Record 0x003f integer conversion vulnerability
Summary An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this...
EulerOS 2.0 SP9 : p11-kit (EulerOS-SA-2021-1034)
According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...
[ASA-202101-3] poppler: arbitrary code execution
Arch Linux Security Advisory ASA-202101-3 ========================================= Severity: High Date : 2021-01-04 CVE-ID : CVE-2020-35702 Package : poppler Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1382 Summary ======= The package poppler before...
EulerOS 2.0 SP9 : p11-kit (EulerOS-SA-2021-1015)
According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...
CVE-2020-11947
iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...
CVE-2020-11947
iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...
CVE-2020-11947
CVE-2020-11947 affects QEMU 4.1.0: iscsi_aio_ioctl_cb in block/iscsi.c performs a heap-based buffer over-read, potentially disclosing unrelated process memory to an attacker (information disclosure). The provided documents do not specify a patched version or exact remediation steps. No exploitati...
CVE-2020-11947
iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...
Denial Of Service (DoS)
libmaxminddb is vulnerable to denial of service. A heap-based buffer over-read in dumpentrydatalist in maxminddb.c allows an attacker to crash the application...
