CVE-2022-23125

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate...

CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

EulerOS 2.0 SP5 : fuseiso (EulerOS-SA-2022-1319)

According to the versions of the fuseiso package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service...

Canon imageCLASS MF644Cdw 10.02 printers缓冲区错误漏洞

Canon imageCLASS MF644Cdw is an intelligent and efficient 3-in-1 color multifunction printer from Canon Japan. A security vulnerability exists in Canon imageCLASS MF644Cdw 10.02 printers, which originates from a failure to properly validate the length of user-supplied data before copying it to a...

(Pwn2Own) Canon imageCLASS MF644Cdw privet Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper...

Canon imageCLASS MF644Cdw 10.02 printers 缓冲区错误漏洞

Canon imageCLASS MF644Cdw is an intelligent and efficient 3-in-1 color multifunction printer from Canon Japan. A security vulnerability exists in Canon imageCLASS MF644Cdw 10.02 printers, which originates from a failure to properly validate the length of user-supplied data before copying it to a...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

Siemens Simcenter Femap BDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

KINGSOFT Internet Security 缓冲区错误漏洞

KINGSOFT Internet Security Kingsoft AntiVirus is an anti-virus program from the Chinese company KINGSOFT. A security vulnerability exists in KINGSOFT Internet Security 9 Plus version 2010.06.23.247, which originates from the presence of a boundary error in the software that results in a stack-bas...

Debian DLA-2947-1 : vim - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2947 advisory. Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and Null pointer dereferences may lead ...

RHEL 8 : glibc (RHSA-2022:0896)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0896 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow via MP4Box (CVE-2022-24575). Connected sources confirm GPAC upstream exposure; no vendor patch/mitigation details are provided in the supplied documents. The vulnerability impact is described as stack overflow in the MP4Box component; explic...

Debian DSA-5100-1 : nbd - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5100 advisory. - In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field...

Ubuntu 18.04 LTS / 20.04 LTS : NBD vulnerabilities (USN-5323-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5323-1 advisory. It was discovered that NBD incorrectly handled name length fields. A remote attacker could use this issue to cause NBD to crash, resulting in...

Denial Of Service (DoS)

abcm2ps is vulnerable to denial of service. The vulnerability exists due to a stack-based buffer overflow in the function getkey in parse.c...

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to a Stack-based Buffer Overflow in GitHub repository vim/vim...

CVE-2022-24094

Adobe After Effects versions 22.2 and earlier and 18.4.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...