208 matches found
CVE-2022-22516
The CVE-2022-22516 entry concerns the SysDrv3S driver in the CODESYS Control runtime system on Windows, where a local attacker can read and write within restricted memory space. The connected records confirm the affected component (SysDrv3S driver) and the underlying issue enabling memory-space a...
PT-2022-15485 · 3S Smart Software Solutions · Codesys Control Runtime System
Name of the Vulnerable Software and Affected Versions: CODESYS Control runtime system affected versions not specified Description: The issue allows any system user to read and write within restricted memory space due to a problem in the SysDrv3S driver. Recommendations: At the moment, there is no...
KLA12489 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Data leak vulnerability in Canvas can be exploited to cause denial of service. 2...
CVE-2022-0522
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2...
CVE-2022-22566
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access DMA vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device...
Mageia: Security Advisory (MGASA-2017-0102)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Realtek RtsUpx Usb Utility Driver 访问控制错误漏洞
Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which originates when the product allows arbitrary reads and writes from physical memory via a...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : PHP vulnerability (USN-5125-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5125-1 advisory. It was discovered that PHP-FPM in PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or...
Debian DSA-4992-1 : php7.4 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4992 advisory. An out-of-bounds read and write flaw was discovered in the PHP-FPM code, which could result in escalation of privileges from local unprivileged user to the root user. For...
LSN-0081-1 Kernel Live Patch Security Notice
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory.CVE-2021-3653 Maxim...
Xen 竞争条件问题漏洞
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen where...
Improper access control
Adobe Media Encoder version 15.1 and earlier is affected by an improper memory access vulnerability when parsing a crafted .SVG file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a...
PYSEC-2021-883
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...
Adobe Bridge 缓冲区错误漏洞
Adobe Bridge is a free digital asset management application from Adobe. 11.1 and earlier versions of Adobe Bridge contain a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to execute arbitrary code...
Improper access control
An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area...
CVE-2020-18756
The CVE-2020-18756 entry describes an arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.’s MAC1100 PLC. The root cause is a memory access flaw that allows an attacker to read the contents of any variable area within the device. Impact is read-access ...
chromium-browser: Out of bounds write in ANGLE
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
Adobe Media Encoder 缓冲区错误漏洞
Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds memory access vulnerability in Adobe Media Encoder 15.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...
RHEL 7 : nettle (RHSA-2021:2356)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2356 advisory. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++...
