16226 matches found
PT-2023-11654 ยท Unknown ยท Advancemame
Name of the Vulnerable Software and Affected Versions: AdvanceMAME versions through 2.1 Description: The issue is a heap-based buffer over-read in the png convert 4 function, located in the pngex.cc file. This occurs in AdvanceMAME. Recommendations: For AdvanceMAME versions through 2.1, update to...
CVE-2020-23909
CVE-2020-23909 describes a heap-based buffer over-read in AdvanceMAME (pngex.cc: function png_convert_4) affecting versions through 2.1. The root cause is improper bounds checking in png_convert_4, leading to potential crashes and, per CNVD/CNNVD entries, possible arbitrary code execution. Exploi...
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
Zyxel ATP ๆ ผๅผๅๅญ็ฌฆไธฒ้่ฏฏๆผๆด
Zyxel ATP is a firewall from Zyxel China. A security vulnerability exists in Zyxel ATP ZLD V5.10 through V5.36 Patch 2, USG FLEX ZLD V5.00 through V5.36 Patch 2, USG FLEX 50W / USG20W-VPN ZLD V5.10 through V5.36 Patch 2, VPN ZLD V5.00 through V5.36. A security vulnerability exists in Patch 2...
openSUSE 15 Security Update : poppler (SUSE-SU-2023:2838-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2838-1 advisory. - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009: Fixed integer...
SUSE-SU-2023:2838-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc bsc1149635. - CVE-2019-12293: Fixed heap-based buffer...
CVE-2023-3649 Buffer Over-read in Wireshark
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...
CVE-2023-3649 Buffer Over-read in Wireshark
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file...
Adobe ColdFusion ๅฎๅ จๆผๆด
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. A security vulnerability exists in Adobe ColdFusion, which arises from being affected by an improperl...
Directory traversal
An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...
CVE-2023-33989 Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)
An attacker with non-administrative authorizations in SAP NetWeaver BI CONT ADD ON - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system...
EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2333)
According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. CVE-2023-26253 Note that...
EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2313)
According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. CVE-2023-26253 Note that...
Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing
Researchers have issued a warning about an emerging and advanced form of voice phishing vishing known as "Letscall." This technique is currently targeting individuals in South Korea. The criminals behind "Letscall" employ a multi-step attack to deceive victims into downloading malicious apps from...
Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing
Researchers have issued a warning about an emerging and advanced form of voice phishing vishing known as "Letscall." This technique is currently targeting individuals in South Korea. The criminals behind "Letscall" employ a multi-step attack to deceive victims into downloading malicious apps from...
Milesight UR32L eventcore access violation vulnerability
Talos Vulnerability Report TALOS-2023-1696 Milesight UR32L eventcore access violation vulnerability July 6, 2023 CVE Number CVE-2023-23571 SUMMARY An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to...
CVE-2023-28542 Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information...
CVE-2023-28542 Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information...