nftable filter Privilege Escalation

The vulnerability of the nftable filter and classification subsystem in the Linux operating system is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

cifs-utils mount.cifs Privilege Escalation

The vulnerability of the mount.cifs component in the Linux CIFS file system mounting utility package, cifs-utils, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Siemens EN100 Ethernet Module

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: EN100 Ethernet Module Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer. 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Siemens PADS Standard/Plus Viewer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: PADS Standard/Plus Viewer Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitations of...

util printf Code Execution

The vulnerability of the util.printf function in PDF viewing and editing applications like Adobe Reader and Adobe Acrobat arises from the execution of operations outside of the buffer in memory, due to improper parameter checking. Exploiting this vulnerability allows a malicious actor to execute...

MariaDB prepare_inplace_add_virtual Buffer Overflow

The vulnerability of the prepareinplaceaddvirtual function in the MariaDB database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

MariaDB Functions Compromise Data Compromise

The vulnerability of the Exectimetracker::getloops/Filesorttracker::reportuse/filesort functions in the MariaDB database management system is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the...

MariaDB st_select_lex_unit exclude_level DoS

The vulnerability of the stselectlexunit::excludelevel function in the MariaDB database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

Firefox Thunderbird Buffer Overflow

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Firefox Use-After-Free

The vulnerability of Firefox browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome V8 Engine Code Execution

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe Reader PDF Viewer Buffer Overflow

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

Siemens EN100 Ethernet Module Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2022-30937)

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant All versions, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO varia...

Java Runtime Environment Heap Buffer Overflow

The vulnerability of the Java Runtime Environment software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the system or disable the security controller...

InCopy Font Processor Code Execution

The vulnerability of the InCopy text editing software’s built-in font processor relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe InCopy Buffer Overflow RCE

The vulnerability of the Adobe InCopy text creation and editing software relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created data in the font...

Adobe Bridge Buffer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

U3D components PDF execution arbitrary code

The vulnerability of the U3D components in PDF viewing and editing programs such as Adobe Reader and Adobe Acrobat is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Adobe Flash Player Code Execution

The vulnerability of the Adobe Flash Player, the Adobe Reader and Adobe Acrobat PDF viewing and editing programs, as well as the Adobe AIR software platform, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute...

PT-2022-3472 · Canbrass · Canbrass

Name of the Vulnerable Software and Affected Versions: CanBRASS versions prior to V7.5.1 Description: A memory buffer vulnerability exists that could cause remote code execution when a command which exploits this vulnerability is utilized. This issue is related to improper restriction of operatio...