PT-2022-37667 · Nvidia · Vgpu

Уязвимость компонента NVIDIA Virtual GPU Manager драйвера виртуальных графических процессоров NVIDIA Virtual GPU связана с ошибкой повторного освобождения памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

CVE-2021-28714

Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code on the target system...

Medium: glibc

Issue Overview: A vulnerability was discovered in glibc where the LDPREFERMAP32BITEXEC environment variable is not ignored when running binaries with the setuid flag on x8664 architectures. This allows an attacker to force system to utilize only half of the memory making the system think the...

Open Design Alliance Drawings SDK Out-of-Bounds Read Vulnerability (CNVD-2021-44992)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to .dwg and .dgn data through a convenient, object-oriented API, a C++ API, support for repairing files, and support for . An out-of-bounds read...

UAF vulnerability in multiple Huawei products

Huawei S2700, etc. are products of Huawei, China.S2700 is an enterprise switch.USG9500 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a...

Unspecified Vulnerability in Rust (CNVD-2021-17265)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in toodee crate before 0.3.0 for Rust, which can be exploited by an attacker to read the contents of uninitialized memory locations...

Rust Buffer Overflow Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in versions of Rust prior to 0.17.0 that can be exploited by an attacker to overwrite a heap memory location...

The vulnerability of Intel Wireless for Open Source microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of Intel Wireless for Open Source microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

HCL BigFix Platform Credentials Plaintext Storage Vulnerability

HCL BigFix Platform is a suite of endpoint security management platform from HCL India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that stems from the program storing credentials in...

Zimbra Web Client Cross-Site Scripting Vulnerability

Zim is a graphical text editor for maintaining a collection of Wiki pages. A cross-site scripting vulnerability exists in Web Client in Zimbra version 9.0. The vulnerability originates when a web system or product performs an operation in memory without properly validating data boundaries,...

CVE-2019-19927

An out-of-bounds OOB memory access flaw was found in ttmputpages in drivers/gpu/drm/ttm/ttmpagealloc.c in the Linux kernel’s graphics module. Incrementing the page pointer for huge pages was not in sync with the reference counter, and this could lead to an out-of-bounds access or a denial of...

The vulnerability of the sysmain.dll file in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the sysmain.dll file in the Windows operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

PT-2020-03: Information disclosure in Сisco ASA and Cisco FTD

Successful exploitation of this vulnerability allows an unauthorized, remote attacker to read arbitrary heap memory of the device and obtain a valid session ID of a user connected to Cisco VPN. The attacker can use the obtained session ID to access the organization’s intranet. Cisco ASA memory ma...

Code injection

Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

The vulnerability of the Serialization component in Oracle Java SE and Java SE Embedded software platforms allows a attacker to trigger a service failure.

The vulnerability of the Serialization component in Oracle Java SE and Java SE Embedded software platforms is related to the provision of unlimited memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2019-5126

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open t...

CVE-2019-19126

A vulnerability was discovered in glibc where the LDPREFERMAP32BITEXEC environment variable is not ignored when running binaries with the setuid flag on x8664 architectures. This allows an attacker to force system to utilize only half of the memory making the system think the software is 32-bit...

RUSTSEC-2019-0023 Cloned interners may read already dropped strings

Affected versions of this crate did not clone contained strings when an interner is cloned. Interners have raw pointers to the contained strings, and they keep pointing the strings which the old interner owns, after the interner is cloned. If a new cloned interner is alive and the old original...

MGASA-2019-0131 Updated firefox packages fix security vulnerability

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow CVE-2019-9810. Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and...