Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-46355)

The NETGEAR R9000, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28245)

NETGEAR R7500 and others are products of NETGEAR Corporation.NETGEAR R7500 is a wireless router.NETGEAR D6100 is a wireless modem.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router. A buffer overflow vulnerability exists in multiple NETGEAR products that originates when a...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46563)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR D6100 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-50926)

The NETGEAR R6700, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67653)

NETGEAR D7800 is a wireless modem, NETGEAR R7500 is a wireless router, NETGEAR WNDR4300 is a wireless router, and NETGEAR D7800 is a wireless modem. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a networked system or product that does not proper...

NETGEAR R7800 Buffer Overflow Vulnerability (CNVD-2020-23427)

The NETGEAR R7800 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.52. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

CVE-2019-15664

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

CVE-2019-15663

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 1 of 2...

Buffer overflow

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

CVE-2019-15665

The CVE-2019-15665 entry affects Rivet Killer Control Center

CVE-2019-15664

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

CVE-2015-1607

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...

The vulnerability of the GDB debugger’s module allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the GDB debugger’s gdb module relates to the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code or trigger a service failure using a specially created ELF file...

Cisco IOS and IOS XE Information Disclosure Vulnerability (CNVD-2019-14438)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An information disclosure vulnerability exists in the secure storage feature of Cisco IOS and IOS XE, which arises from an incorrect memory operation performed by the program during encryption. A local...

VLC (European Commission - DIGIT): Buffer overflow in libavi_plugin memmove() call

Summary: When parsing an invalid AVI file, a buffer overflow might occur. Description: The ReadFrame function in the avi.c file uses a variable iwidthbytes, which is obtained directly from the file. It is a signed integer. It does not do a strict check before the memory operationmemmove, memcpy,...

The vulnerability of the Monitoring Manager component in the real-time data synchronization tool Oracle GoldenGate allows a hacker to gain full control over the application.

The vulnerability of the Monitoring Manager component in the real-time data synchronization tool Oracle GoldenGate arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain full control over the application using a TCP...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...