CBL Mariner 2.0 Security Update: rsyslog (CVE-2022-24903)

The version of rsyslog installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-24903 advisory. - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap...

Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer

Impact This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change generally improves performance and reduces workload on the garbage collector. Howeve...

GHSA-838X-PCVX-6P5W Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer

Impact This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change generally improves performance and reduces workload on the garbage collector. Howeve...

PT-2023-9535 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions 13.3 and earlier iOS versions 16.4 and earlier, 15.7.4 and earlier iPadOS versions 16.4 and earlier, 15.7.4 and earlier macOS Big Sur version 11.7.5 and earlier macOS Monterey version 12.6.4 and earlier tvOS version 16....

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory when processing USD files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

Hyperkit Unauthorized Access

The vulnerability of the Hyperkit virtualization software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Substance 3D Stager Heap Buffer Overflow

The vulnerability of the Substance 3D Stager software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...

Adobe Dimension Buffer Overflow Info Disclosure

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Substance 3D Stager Buffer Overflow Info Disclosure

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Mozilla Firefox Memory Write Arbitrary Execution

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to improper restrictions on operations within memory buffers. Exploiting these vulnerabilities can allow a remote attacker to perform arbitrary memory writes by improperly handling th...

ROS-20230315-01

Vulnerability in Mozilla Thunderbird email client related to notifications that are not displayed, when the browser is in full screen mode, allowing an attacker to trick the victim into visiting a malicious website and performing a spoofing attack. to visit a malicious website and perform a...

ArubaOS PAPI Code Execution

The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets...

ArubaOS PAPI Code Execution

The vulnerability of the PAPI network protocol implementation in ArubaOS operating systems lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets...

Web Audio Application Code Execution

The vulnerability of the Web Audio application interface in Google Chrome browsers involves executing operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTML page...

Adobe Photoshop Buffer Overflow Info Disclosure

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Adobe Dimension Buffer Overflow Info Disclosure

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Tbase Database Server Code Execution

The vulnerability of the Tbase database server of the B&R APROL software solution for monitoring the status of industrial systems is related to the possibility of writing data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remote...