Microsoft .NET Framework Privilege Escalation (CVE-2015-2504)

A privilege escalation vulnerability exists in Microsoft .NET Framework. The vulnerability is due to an issue with the way that the .NET Framework validates the number of objects in memory before copying those objects into an array. A remote attacker code exploit this vulnerability by enticing a...

Out-of-bounds

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor IntPeGetDirectory, TOCTOU IntPeParseUnwindData or insufficie...

Microsoft Windows Hyper-V Elevation of Privilege Vulnerability (CNVD-2021-08829)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. The software allows the creation of virtual hard drives, virtual switches, and many other virtual devices. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V, which can be...

Pillow Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/TiffDecode.c file in Pillow versions prior to 7.1.0. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundarie...

Foxit PhantomPDF Mac and Reader for Mac Buffer Overflow Vulnerability

Foxit PhantomPDF Mac and Foxit Reader for Mac are both China Foxit Foxit company's a macOS-based PDF document reader. A buffer overflow vulnerability exists in Foxit PhantomPDF Mac versions prior to 3.3 and Reader for Mac versions prior to 3.3. The vulnerability originates when a networked system...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-29360)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resultin...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46566)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless router.NETGEAR R6100 is a wireless...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-46571)

NETGEAR D3600 and others are products of NETGEAR, Inc.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a wireless router.NETGEAR WNDR3700 is a...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2020-28136)

NETGEAR D8500 and others are products of NETGEAR, Inc.NETGEAR D8500 is a wireless modem.WNR3500L is a wireless router.NETGEAR EX3700 is a wireless network signal extender.NETGEAR EX3700 is a wireless network signal extender.NETGEAR EX3700 is a wireless network signal extender.NETGEAR EX3700 is a...

FreeBSD : FreeBSD -- ipfw invalid mbuf handling (33edcc56-83f2-11ea-92ab-00163e433440)

Incomplete packet data validation may result in accessing out-of-bounds memory CVE-2019-5614 or may access memory after it has been freed CVE-2019-15874. Impact : Access to out of bounds or freed mbuf data can lead to a kernel panic or other unpredictable results. C Tenable Network Security, Inc...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61059)

NETGEAR EX7000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in...

Microsoft Windows Hyper-V Elevation of Privilege Vulnerability (CNVD-2020-31546)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...

About the security content of iOS 12.4.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

OSSEC-HIDS Server Component Buffer Overflow Vulnerability

OSSEC-HIDS is an open source intrusion detection tool. A buffer overflow vulnerability exists in the OSSEC-HIDS server component. The vulnerability originates when a network system or product performs operations on memory without properly validating data boundaries, resulting in incorrect read an...

CVE-2020-8517

An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in extlmgroupacl may write to memory outside the credentials buffer. On systems with memory access protections, this can result in the helper process being terminated...

jhead heap buffer overflow vulnerability

jhead is a tool for modifying JPEG file information. A buffer overflow vulnerability exists in the 'Get32' function in jhead 3.04 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...

Static HTTP Server Buffer Overflow Vulnerability

Static HTTP Server is a static HTTP server. A buffer overflow vulnerability exists in Static HTTP Server version 1.0. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...

Multiple Apple Products CoreAudio Component Out-of-Bounds Read Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. coreAudio is a core audio component. An out-of-bounds read vulnerability exists in the CoreAudio componen...

Linux kernel buffer overflow vulnerability (CNVD-2019-45882)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the Linux kernel. The vulnerability arises from a networked system or product performing operations in memory without properl...

Intel PROSet/Wireless WiFi Software Buffer Overflow Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A buffer overflow vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which arises when a network system or product performs an operation in memory without properly validating th...