1600 matches found
The vulnerability of the IOSurfaceAccelerator component in iOS, iPadOS, and macOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the IOSurfaceAccelerator component in iOS, iPadOS, and macOS lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Buffer overflow
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap. potentially resulting in a complet...
Buffer overflow
An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow potentially resulting in a complete loss of...
PT-2023-5135 · Microsoft · 3D Builder
Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to a memory buffer overflow when processing WRL and PLY files, which can allow an attacker to execute arbitrary code by loading a specially crafted file or link...
GLSA-202305-22 : ISC DHCP: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202305-22 ISC DHCP: Multiple Vulnerabilities - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are beyond their...
Important: golang
Issue Overview: Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CVE-2022-23772 cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This...
Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2023-1656)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.1 : dhcp (EulerOS-SA-2023-1622)
According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it...
CVE-2023-30546
CVE-2023-30546 affects Contiki-NG, where an off-by-one in the Antelope DBMS storage backend (os/storage/antelope/storage-cfs.c) in functions storage_get_index/storage_put_index allocates a buffer one byte too small for merging strings, allowing reads beyond the buffer. The issue is present in Con...
The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Accessibility component in Google Chrome browser allows attackers to disclose protected information.
The vulnerability of the Accessibility component in Google Chrome browser relates to memory overflow outside the bounds of the program. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created web page...
An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.
...
The vulnerability of the Redis database management system, related to a full overflow of the memory buffer, allows an attacker to cause a service failure.
The vulnerability of the Redis database management system is related to a full overflow of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure using commands such as SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD...
The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
PT-2023-1826 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.0 and earlier Description: The issue is caused by a memory buffer overflow operation. Exploitation of this issue could allow an attacker to execute arbitrary code by using a specially crafted file. This...
DEBIAN-CVE-2023-0030
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system...
UBUNTU-CVE-2023-0030
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2023-0030
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system...