9340 matches found
AZL-67455 CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1
parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...
CVE-2023-53154
parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...
AZL-62005 CVE-2023-53154 affecting package apparmor for versions less than 3.0.4-5
parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...
UBUNTU-CVE-2023-53154
parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via "1":1, with no trailing newline if cJSONParseWithLength is called...
CVE-2023-22297
Access of memory location after end of buffer in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access...
CVE-2023-0817
Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV...
CVE-2022-40518
Information disclosure due to buffer overread in Core...
cJSON 缓冲区错误漏洞
cJSON is a lightweight open source JSON parser from the individual developer Dave Gamble. A buffer error vulnerability exists in cJSON versions prior to 1.7.18, which stems from a heap buffer over-read in the parsestring function...
The vulnerability of the SubUPnPCSInit function in the /sbin/udev file of D-Link DCS-932L microprogrammed IP camera software allows a intruder to trigger a service failure.
The vulnerability of the SubUPnPCSInit function in the /sbin/udev file of D-Link DCS-932L microprogrammed IP camera software is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the downloadFile.cgi function in the microprogramming software for the Totolink-A800R router allows a hacker to execute arbitrary code.
The vulnerability of the downloadFile.cgi function in the Totolink-A800R router microprogramming system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the get_parentControl_list_Info function in the Tenda AC8V4 router microprogramming software allows a attacker to execute arbitrary code through a specially created parameter called deviceid.
The vulnerability of the getparentControllistInfo function in the Tenda AC8V4 router microprogramming system is related to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created deviceid paramete...
CVE-2022-40519
Information disclosure due to buffer overread in Core...
CVE-2022-1907
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11...
CVE-2022-40524
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service...
CVE-2021-1063
NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...
CVE-2021-46611
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-31430
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...
CVE-2021-39247
Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to islastsingleascii in code1.c, and rsencodeuint in reedsol.c...
CVE-2021-1090
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to dat...