CVE-2022-27625

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...

CVE-2022-27625

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...

CVE-2022-27624: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...

QNAP QVR Elite Plugin Heap Buffer Overflow

The vulnerability of QNAP QVR Elite, QVR Pro, and the QVR Guard emergency switching management application relates to data recording beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

QNAP QVR Elite Plugin Heap Buffer Overflow

The vulnerability of QNAP QVR Elite, QVR Pro, and the QVR Guard application, which is used for managing emergency switching of video surveillance systems, lies in data recording beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Adobe InCopy Buffer Overflow RCE

The vulnerability of the Adobe InCopy text creation and editing software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

Adobe InCopy Buffer Overflow RCE

The vulnerability of the Adobe InCopy text creation and editing software relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created SVG file...

Adobe Illustrator Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Adobe Illustrator Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created SVG file...

Adobe Bridge Buffer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

Adobe InDesign Buffer Overflow Info Disclosure

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file...

Rizin Buffer Overflow

The vulnerability of the Rizin command-line tool set is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-39807: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing .sldasm, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the us...

CVE-2022-41169: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41184: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File .cur, ico.x3d file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow...

CVE-2022-41175: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile .emf, emf.x3d file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow o...

CVE-2022-41197: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds .wrl, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of t...

CVE-2022-41201: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary .rh, rh.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overfl...

CVE-2022-41194: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...