16226 matches found
CVE-2023-28555 Buffer Over-read in Audio
Transient DOS in Audio while remapping channel buffer in media codec decoding...
CVE-2023-28555 Buffer Over-read in Audio
Transient DOS in Audio while remapping channel buffer in media codec decoding...
CVE-2023-21625
CVE-2023-21625 describes an information disclosure due to a buffer over-read during DNS response processing in Network Services, attributed to Qualcomm-based devices. The CVE is documented with high impact in CVSS metrics (confidentiality impact HIGH; network attack; no user interaction needed). ...
Upgraded Q -> 2 from #116 [1691272104948]
Judge has assessed an item in Issue 116 as 2 risk. The relevant finding follows: L-02 Misuse of shl function leads to unnecessary over-estimation of size in calldatacopy within getArgBytes function --- The text was updated successfully, but these errors were encountered: All reactions...
CVE-2023-33375
Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices...
SUSE SLES12: libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc (SUSE-SU-2023:2971-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2971-1 advisory. - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS bsc1209616. - CVE-2023-33285: Fixed buffer overflow in QDnsLookup bsc1211642....
PT-2023-4339 · Foxit · Foxit Pdf Reader +1
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a buffer data out-of-bounds read in Foxit PDF Reader and Foxit PDF Editor. It allows remote attackers to...
EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2023-2442)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. CVE-2022-1725 - Buffer Over-read in GitHub repository vim/v...
Remote code execution in Apache Jackrabbit
Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...
CVE-2023-37895
Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...
Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service (CVE-2019-1617)
A vulnerability in the Fibre Channel over Ethernet FCoE N-port Virtualization NPV protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to an incorrect processing of FCoE packets when...
The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.
The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...
PT-2023-20347 · Esri · Arcgis Server
Name of the Vulnerable Software and Affected Versions: ArcGIS Server versions 10.8.1 through 11.1 Description: The issue is related to a Cross-site Scripting vulnerability that may allow a remote, authenticated attacker to create a crafted link. This link could potentially render an image in the...
SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:2907-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2907-1 advisory. - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009:...
Medium: tcpdump
Issue Overview: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463. CVE-2019-15167 Affected Packages: tcpdump Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this...
CVE-2023-22023
Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Interface. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
