CVE-2023-32724: Incorrect Permission Assignment for Critical Resource

Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory access and manipulation...

PT-2023-9376

Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description The issue is related to incorrect permission assignment for a critical resource in the Zabbix monitoring system. Exploitation of this issue may allow a remote attacker to access confidential...

curl: CVE-2023-28319: UAF in SSH sha256 fingerprint check

Vulnerability description not provided...

CVE-2022-31625

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or...

The vulnerability of the Vim text editor, related to the pointer shifting beyond the selected memory range, allows a hacker to trigger a service failure.

The vulnerability of the Vim text editor is related to the pointer being moved beyond the selected memory range. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

Xiaomi MIUI elevation of privilege vulnerability

Xiaomi MIUI is an Android-based smartphone operating system developed by Xiaomi Technology Xiaomi in China. version 12.5.2 of Xiaomi MIUI contains a security vulnerability that stems from a memory pointer being copied to two function modules when a function is called. An attacker could exploit th...

Double free

There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an attacker can cause the pointer to be repeatedly released through malicious operations, resulting in the affected module crashing and affectin...

Xiaomi MIUI 资源管理错误漏洞

Xiaomi MIUI is an Android-based smartphone operating system developed by Xiaomi Technology Xiaomi in China. version 12.5.2 of Xiaomi MIUI contains a security vulnerability that stems from a memory pointer being copied to two function modules when a function is called. An attacker could exploit th...

Mageia: Security Advisory (MGASA-2014-0497)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALPINE-CVE-2021-22945

When sending data to an MQTT server, libcurl = 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again...

AZL-6589 CVE-2021-38205 affecting package kernel for versions less than 5.10.78.1-1

drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer i.e., the real IOMEM pointer...

CVE-2021-38205

drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer i.e., the real IOMEM pointer...

CVE-2021-22548

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit...

Omron CX-One and CX-Protocol Security Vulnerabilities

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A security...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. An invalid free flaw was found in Firefox's plugin handler. Malicious web content could result in an invalid memory pointer being freed, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running the...

CVE-2018-19029

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash...

KLA11237 Multiple vulnerabilities in Foxit Reader and Foxit PhantomPDF

Multiple serious vulnerabilities have been found in Foxit Reader and Foxit PhantomPDF. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An unsafe DLL loading...

CVE-2018-3592

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if...

shopify-scripts: mrb_vformat() heap overflow could lead to code execution

Description: ==================== mrbvformat is responsible to parse string format like 'printf' in C, the code doesn't check the number given between '%' and '$' . mrbfixnumtostr is called by joinary and converts the given number from string into integer, this could lead to overwrite and fully...

Microsoft Internet Explorer CElement::DelMarkupPtr Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...