The vulnerability of the PKCS15-init personalization utility in the software and library set for working with smart cards in OpenSC allows a violator to gain unauthorized access to protected information.

The vulnerability of the pkcs15-init personalization utility for smart cards, a software tool and library for working with smart cards in OpenSC, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

UBUNTU-CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created X1 files...

The vulnerability of the trace_event_buffer_lock_reserve() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the traceeventbufferlockreserve function in the kernel/trace/trace.c module of the Linux operating system is related to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2018-9472

In xmlMemStrdupLoc of xmlmemory.c, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation...

edk2: Integer overflows in PeCoffLoaderRelocateImage

A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in a buffer overflow in the dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the overflow of memory buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

kernel: init/main.c: Fix potential static_command_line memory overflow

A staticcommandline memory overflow was found in the Linux kernel. This issue may cause a crash...

SUSE CVE-2024-50180

In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values of the variables xres and yres are placed in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters and a space if the array contains...

Not limitation of upload file size, lead to server crash

Description librechat use multer, which is a middleware which handles streaming multipart fileupload. If use in memory storagemulter by default, can do not limit the upload file size, when handling big file, server will crash for out of memory. Attacker with no privilege can exploit this. Proof o...

USN-7083-1 openjpeg2 vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain memory operations when using the command line "-ImgDir" in a directory with a large number of files, leading to an integer overflow vulnerability. An attacker could potentially use this issue to cause a denial of service. This issue only...

The vulnerability of the libodxdll.dll library in the AutoCAD modeling, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the libodxdll.dll library in software for simulation, design, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execu...

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005562 fixes several issues. The following security issues were fixed: CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2024-35863: Fixed potential UAF i...

The vulnerability of Microsoft Edge browsers, related to overflowing dynamic memory buffers, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Microsoft Edge relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the amdgpu_atombios_init_mc_reg_table() function in the Linux operating system’s amdgpu driver allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the amdgpuatombiosinitmcregtable function in the drivers/gpu/drm/amd/amdgpu/amdgpuatombios.c file of the amdgpu kernel in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

PT-2024-6968 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.22 Oracle VM VirtualBox versions prior to 7.1.2 Description: A difficult to exploit vulnerability in Oracle VM VirtualBox allows a high privileged attacker with logon to the infrastructure where Orac...

PT-2024-9364 · Pdfl Sdk · Pdfl Sdk

Name of the Vulnerable Software and Affected Versions: PDFL SDK versions 21.0.0.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Eclipse Jetty 安全漏洞

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty that originates from a remote denial-of-service attack that can be triggered by an unauthorized user by sending a carefully constructed...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...