CVE-2023-42506

Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user open a specially crafted OnSinView2 project file...

The vulnerability of GPU driver components in iPadOS and iOS operating systems allows attackers to execute arbitrary code.

The vulnerability of GPU driver in iPadOS and iOS systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-44184

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon mgd process of Juniper Networks Junos OS and Junos OS Evolved allows a network-based authenticated low-privileged attacker, by executing a specific command via NETCONF, to cause a CPU...

The vulnerability of embedded Qualcomm microprogramming software, related to the pointer shifting beyond the allocated memory space, allows a hacker to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to the pointer shifting beyond the allocated memory space. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the NTLM (New Technology LAN Manager) protocol implemented by the Exim mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the NTLM New Technology LAN Manager protocol implemented by the Exim mail server is related to the occurrence of operations outside the buffer in memory during request processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

The vulnerability of the FontParser component in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the FontParser component in iPadOS, watchOS, iOS, tvOS, and Mac OS operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the software environment of the Tecnomatix Plant Simulation model lies in the ability to write data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software environment for simulation modeling of systems and processes in Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SPP file...

The vulnerability of the MPEG12_ParseSeqHdr function (media_tools/mpeg2_ps.c) in the GPAC multimedia platform allows a perpetrator to trigger a service failure.

The vulnerability of the MPEG12ParseSeqHdr function mediatools/mpeg2ps.c in the GPAC multimedia platform is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval()

An out-of-bounds OOB memory access flaw was found in the Netfilter module in the Linux kernel's nftbyteordereval in net/netfilter/nftbyteorder.c. A bound check failure allows a local attacker with CAPNETADMIN access to cause a local privilege escalation issue due to incorrect data alignment...

The vulnerability of the utfc_ptr2len() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the utfcptr2len function in the Vim text editor is related to the execution of an operation outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Vulnerability of the clear_decompress_bands_data() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the cleardecompressbandsdata function in the RDP client FreeRDP is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the AES-XTS encryption algorithm in the OpenSSL library, which allows a hacker to trigger a service failure.

The vulnerability of the AES-XTS encryption algorithm in the OpenSSL library relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2023-27190 · Hitachi · Hitachi Eh-View

Name of the Vulnerable Software and Affected Versions: Hitachi EH-VIEW KeypadDesigner affected versions not specified Description: The issue is related to an Improper Restriction of Operations within the Bounds of a Memory Buffer, which allows local attackers to potentially disclose information a...

The vulnerability of the kernel of iOS, iPadOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability in the kernel of iOS, iPadOS, and macOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CODESYS Control Buffer Error Vulnerability

3s-smart Software Solutions CODESYS Control is a suite of industrial control program programming software from 3s-smart Software Solutions, Germany. CODESYS Control suffers from a buffer error vulnerability that arises from improper restriction of memory buffer ranges, allowing a remote attacker...

The vulnerability of the Control FPWIN Pro PLC programming software lies in the possibility of data being written outside of the buffer in memory, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PLC programming software Control FPWIN Pro relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Federated Server of the IBM DB2 database management system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Federated Server in the IBM DB2 database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, tvOS, and the Safari browser allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, and tvOS, as well as in the Safari browser, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitra...

The vulnerability of the php_cli_server_startup_workers function (sapi/cli/php_cli_server.c) in the PHP programming language allows a attacker to trigger a service failure.

The vulnerability of the phpcliserverstartupworkers function sapi/cli/phpcliserver.c in the PHP interpreter is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SUSE CVE-2023-28410

Improper restriction of operations within the bounds of a memory buffer in some IntelR i915 Graphics drivers for linux before kernel version 6.2.10 may allow an authenticated user to potentially enable escalation of privilege via local access...