CVE-2005-3279

Stack-based buffer overflow in the vgascoprintf function in Jan Kybic BitMap Viewer BMV 1.2, when compiled with the MUNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option...

CVE-2005-4882

tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager WSI and other products, allows remote attackers to cause a denial of service daemon crash via a long filename in a TFTP read aka RRQ or get request, a different vulnerability than CVE-2002-2226...

Allocation of Resources Without Limits or Throttling

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling over the /upload endpoint. An attacker can cause denial of service by sending a payload with an...

CVE-2023-6362

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler SEH registers. This could allow attackers to execute arbitrary code via a long filename argument...

CVE-2023-6361

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler SEH registers. This could allow attackers to execute arbitrary code via a long filename argument...

CVE-2023-6361

A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured Exception Handler SEH registers. This could allow attackers to execute arbitrary code via a long filename argument...

PT-2024-14937 · X Ways · Winhex

Name of the Vulnerable Software and Affected Versions: Winhex versions 16.1 SR-1 and 20.4 Description: A buffer overflow vulnerability has been discovered in Winhex, affecting the Structured Exception Handler SEH registers. This issue could allow attackers to execute arbitrary code via a long...

X-Ways Winhex 缓冲区错误漏洞

X-Ways Winhex is a general-purpose hex editor for files, disks, and RAM from X-Ways. A buffer error vulnerability exists in X-Ways Winhex versions 16.1 SR-1 and 20.4, which stems from a buffer overflow that controls the Structured Exception Handler register, which could allow an attacker to execu...

ROS-20240704-28

A vulnerability in the curl program line utility is related to the storage of HSTS data in a file with a too long name, curl can delete the entire contents, causing subsequent requests that use the file to be unaware of the HSTS status they should have used. file will be unaware of the status of...

CentOS 9 : zlib-1.2.11-41.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the zlib-1.2.11-41.el9 build changelog. - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2024-1424)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a lon...

EulerOS Virtualization 2.11.0 : zlib (EulerOS-SA-2024-1437)

According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...

CVE-2024-1112

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...

Heap overflow

Heap-based buffer overflow vulnerability in Resource Hacker, developed by Angus Johnson, affecting version 3.6.0.92. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument...

Resource Hacker Buffer Error Vulnerability

Resource Hacker is a resource editor for 32-bit and 64-bit Windows applications from the individual developer Angus Johnson. Resource Hacker version 3.6.0.92 suffers from a buffer error vulnerability that originates from allowing an attacker to execute arbitrary code via a long filename parameter...

PT-2024-16773 · Unknown · Resource Hacker

Name of the Vulnerable Software and Affected Versions: Resource Hacker version 3.6.0.92 Description: A heap-based buffer overflow issue exists, potentially allowing an attacker to execute arbitrary code via a long filename argument. Recommendations: For version 3.6.0.92, consider avoiding the use...

CVE-2024-0645

Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records...

CVE-2024-0645 Buffer Overflow Vulnerability in Explorer++

Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records...

PT-2024-15713 · Extplorer · Extplorer

Name of the Vulnerable Software and Affected Versions: Explorer++ version 1.3.5.531 Description: A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler SEH records. This issue allows for the execution of arbitrary code, potentially...

Low: curl

Issue Overview: When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use. CVE-2023-46219 Affected Packages: curl Note: This advisory is applicable to Amazon Linu...