The vulnerability of the Cisco SD-WAN vEdge tunnel forwarding function in microprogramming-based routers of Cisco SD-WAN vEdge allows a attacker to cause a service failure.

The vulnerability of the Cisco SD-WAN vEdge micro-programming software’s VPN tunneling function is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that allows data to be written beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the execution of operations beyond the buffer in memory. Exploiting these...

CVE-2020-36151

CVE-2020-36151 affects libmysofa (versions 0.5–1.1). The root cause is incorrect handling of input data in mysofa_resampler_reset_mem, leading to a heap buffer overflow that can overwrite large blocks of memory. Connected advisories confirm fixes in libmysofa 0.9.1 via openSUSE/SUSE security upda...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Blackbeam Rust-marc 安全漏洞

Blackbeam Rust-marc is a codebase for the Rust language from Blackbeam's individual developers to interact with mrc format files. A security vulnerability exists in Blackbeam Rust-marc versions prior to 2.0.0, which stems from a user-supplied read implementation that can access the old contents o...

CVE-2021-25905

An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory...

RUSTSEC-2021-0152 `out_reference::Out::from_raw` should be `unsafe`

Out::fromraw in affected versions allows writing a value to invalid memory address without requiring unsafe. The soundness issue has been addressed by making Out::fromraw an unsafe function...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording data beyond the buffer limit in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording of data beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Open Design Alliance Drawings SDK 安全漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to .dwg and .dgn data through a convenient, object-oriented API, a C++ API, support for repairing files, and support for .NET, JAVA, and Python...

OPENSUSE-SU-2021:0075-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-29568: An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the event...

The vulnerability of the Mozilla Firefox browser, related to the use of memory after its release, allows a hacker to trigger a service failure.

The vulnerability of the Mozilla Firefox browser is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker, working remotely, to cause a service failure...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client relates to the issue of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information and compromise its integrity and...

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software lies in the use of memory after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client involves an operation that goes beyond the allowed limits of the data buffer. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its...

CVE-2021-21448

CVE-2021-21448 affects SAP GUI for Windows (version 7.60). The issue allows an attacker with local access and at least OS user privileges to spoof logon credentials for Application Server ABAP backend systems by manipulating client memory, potentially accessing restricted information. Exploitatio...

Design/Logic Flaw

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. ws crate through 2020-09-25 for Rust A security vulnerability exists that stems from the outgoing buffer not being properly constrained, leading to a remote memory consumption attack...

The vulnerability in the implementation of the alloc_pool function of the ProFTPD server allows a hacker to execute arbitrary code.

The vulnerability of the ProFTPD FTP-server’s allocpool function relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...