CVE-2020-7928 Improper neutralization of null byte leads to read overrun

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and...

PT-2020-19853 · Mongodb +1 · Mongodb Server +2

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 4.5.1 MongoDB Server versions 4.4 prior to 4.4.1 MongoDB Server versions 4.2 prior to 4.2.9 MongoDB Server versions 4.0 prior to 4.0.20 MongoDB Server versions 3.6 prior to 3.6.20 Description: A user authorize...

Improper neutralization of null byte leads to read overrun

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology and Standard Manageability, allowing a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology and Standard Manageability relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Vulnerability of Microsoft Edge and Internet Explorer browsers, caused by the execution of operations beyond the buffer in memory, allowing attackers to execute arbitrary code

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by the execution of an operation outside the buffer in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to enhance their privileges

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from the operation beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from the operation beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

FreeBSD : libjpeg-turbo -- Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function. (23a667c7-0b28-11eb-8834-00155d01f202)

libjpeg-turbo releases reports : This release fixes the following security issue : - Heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of Adobe InDesign’s computer layout automation tool and the Adobe InDesign Server’s computer layout automation server, related to the issue of executing operations beyond the buffer limits in memory, allows attackers to execute arbitrary code on the target system.

The vulnerability of Adobe InDesign computer layout automation tools and the Adobe InDesign Server automation server is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system...

The vulnerability in the V8 engine of Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the V8 engine implementation in Google Chrome browser is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability of the babel_print_v2() function in the tcpdump utility for intercepting and analyzing network traffic allows a hacker to cause a service failure.

The vulnerability of the babelprintv2 function print-babel.c in the network traffic capture and analysis tool tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Windows Codecs Library component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Codecs Library component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Security Bulletin: Potential security vulnerability for the Oracle June 2012 CPU (CVE-2012-1713) shipped with Rational Developer for System z

Summary IBM Rational Developer for System z is shipped with an IBM Java that is based on the Oracle Java. Oracle has released a June 2012 critical patch updates CPU which contain security vulnerability fixes and the IBM Java is affected. Vulnerability Details | Subscribe to My Notifications to be...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to writing data beyond the buffer in memory. This allows attackers to execute arbitrary code and disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to data writing beyond the buffer limits in memory. Exploiting these vulnerabilities...

The vulnerability of the Server Board M10JNP2SB server software, related to the occurrence of operations outside the buffer boundaries in memory, allows attackers to exploit their privileges.

The vulnerability of the Server Board M10JNP2SB server software-related microprogramming system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...