2255 matches found
Fortinet FortiClient Credentials can be dumped from memory (FG-IR-23-278)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-278 advisory. - A Cleartext Storage of Sensitive Information vulnerability CWE-312 in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 throu...
The vulnerability of the Input Method Editor (IME) component of Microsoft Windows allows a hacker to execute arbitrary code.
The vulnerability of the Input Method Editor IME component in Microsoft Windows systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-12668
Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability. By using an IO Control, a user space program can trick the driver into writing a 0 into any chosen memory location. In conjunction with information leakage from the WinPmem driver, attackers can discover the...
The vulnerability of Remote Desktop Services (RDS) for Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of Remote Desktop Services RDS for Microsoft Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its memory management after it is released. This allows attackers to execute arbitrary code.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Windows Mobile Broadband Driver for Microsoft Windows operating systems allows attackers to gain increased privileges.
The vulnerability of the Windows Mobile Broadband Driver for Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2024-46971 GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-49878)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49878 advisory. - In the Linux kernel, the following vulnerability has been resolved: resource: fix regionintersects vs...
UBUNTU-CVE-2024-54508
The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash...
The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...
The vulnerability of the IQ microprogramming software-based Lorex 2K Indoor Wi-Fi Security Camera allows a intruder to escalate their privileges to root level and gain full access to the device.
The vulnerability of the IQ microprogrammed IP camera system from Lorex 2K Indoor Wi-Fi Security Camera lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to elevate their privileges to root and gain full acce...
The vulnerability of the Windows Mobile Broadband Driver for Microsoft Windows operating systems allows attackers to gain increased privileges.
The vulnerability of the Windows Mobile Broadband Driver for Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Wireless Wide Area Network Service (WwanSvc) in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Wireless Wide Area Network Service WwanSvc in Microsoft Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to enhance their privileges and execute arbitrary code.
The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2956)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-47615
GStreamer has a concrete vulnerability CVE-2024-47615: an OOB write in vorbis_parse.c within gst_parse_vorbis_setup_packet where a size read from input is not validated, allowing the write to exceed pad->vorbis_mode_sizes (256) by as much as ~380 bytes and potentially corrupt adjacent memory. ...
CVE-2024-47615 GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer
GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gstparsevorbissetuppacket within vorbisparse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the...
Vulnerability fixed in Adobe Photoshop
Adobe has fixed a vulnerability in Photoshop Desktop Versions 26.0 and earlier. The vulnerability is in how Photoshop handles memory management, specifically a Use After Free error. This vulnerability allows an attacker to execute arbitrary code, but requires user interaction such as opening a...
openSUSE 15 Security Update : qt6-webengine (openSUSE-SU-2024:0402-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0402-1 advisory. - CVE-2024-11403: Fixed out of bounds memory read/write in libjxl boo1233764 Tenable has extracted the preceding description block directly from the SUSE...