The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory, allowing a malicious actor to execute arbitrary code.

The vulnerability of the WebKit rendering module arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the ext4_init_block_bitmap() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ext4initblockbitmap function in the Linux operating system is related to writing data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created ext4 file system image...

The vulnerability of the ext4_updateInline_data() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4updateInlinedata function in the Linux operating system is related to writing data beyond the buffer boundaries on the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created instance of the ext4 file system...

The vulnerability of the Ghostscript software for document processing, conversion, and generation arises from operations that go beyond buffer boundaries in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerabilities of OPC UA data transfer specification implementations in industrial networks, related to the execution of operations outside the buffer boundaries in memory, allow attackers to cause service failures.

The vulnerability of OPC UA data transfer specification implementations in industrial networks is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted request...

The vulnerability of the JBIGDecode function in the library for viewing, editing, and converting TIFF files into LibTIFF files, related to writing beyond the buffer memory, allows attackers to cause service failures or execute arbitrary code.

The vulnerability of the JBIGDecode function “tifjbig.c” in the library for viewing, editing, and converting TIFF files related to LibTIFF is associated with errors that allow the execution of write operations beyond the buffer memory. Exploiting this vulnerability can enable an attacker to cause...

CVE-2018-12180

A flaw was found in edk2. When registering a RAM disk whose size is not a multiple of 512 bytes, the BlockIo protocol produced by the RamDiskDxe driver will incur memory read/write overrun. The memory overrun will happen when reading/writing the last block on the RAM disk. The highest threat from...

The vulnerability of the DHCP server service in the Windows operating system allows a hacker to execute arbitrary code on the DHCP server.

The vulnerability of the DHCP server service in the Windows operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the DHCP server by sending a specially crafted packet to the DHCP server...

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode

The vulnerability of the Win32k component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a...

CVE-2019-9022

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

EulerOS 2.0 SP2 : curl (EulerOS-SA-2019-1047)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies t...

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer, related to writing beyond buffer boundaries in memory, allows a perpetrator to cause a service failure and gain unauthorized access to confidential data.

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted ARF or WR...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect Upward Integration Modules (UIM) (CVE-2014-3508, CVE-2014-5139, CVE-2014-3509, CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3510, CVE-2014-3511, CVE-2014-3512)

Summary There are multiple vulnerabilities in OpenSSL that is used by Upward Integration Modules UIM. These issues were disclosed on August 6, 2014 by the OpenSSL Project. Vulnerability Details Summary There are multiple vulnerabilities in OpenSSL that is used by Upward Integration Modules UIM...

Amazon Linux AMI : curl (ALAS-2019-1148)

A heap use-after-free flaw was found in curl related to closing an easy handle. When closing and cleaning up an 'easy' handle in the Curlclose function, the library code first frees a struct without nulling the pointer and might then subsequently erroneously write to a struct field within that...

The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service...

Low: curl

Issue Overview: A heap use-after-free flaw was found in curl related to closing an easy handle. When closing and cleaning up an 'easy' handle in the Curlclose function, the library code first frees a struct without nulling the pointer and might then subsequently erroneously write to a struct fiel...

A vulnerability in the DHCP service of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability in the DHCP service of the Windows operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted DHCP response...