CVE-2022-22274

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall...

Unauthenticated Stack-Based Buffer Overflow Vulnerability In SonicOS

A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in code execution in the firewall.SonicWall PSIRT is not aware of active exploitation in the wild. No reports of a PoC have be...

Updated abcm2ps packages fix security vulnerability

abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculatebeam at draw.c. CVE-2021-32434 Stack-based buffer overflow in the function getkey in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service DoS via unspecified vectors. CVE-2021-324...

(Pwn2Own) Netatalk setfilparams Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

SUSE SLES11 Security Update : glibc (SUSE-SU-2022:14923-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14923-1 advisory. - Integer overflow in the strxfrm function in the GNU C Library aka glibc or libc6 before 2.21 allows context-dependent attackers to cause a...

CVE-2022-23125

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate...

CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

EulerOS 2.0 SP5 : fuseiso (EulerOS-SA-2022-1319)

According to the versions of the fuseiso package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the isofsrealreadzf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service...

Canon imageCLASS MF644Cdw 10.02 printers缓冲区错误漏洞

Canon imageCLASS MF644Cdw is an intelligent and efficient 3-in-1 color multifunction printer from Canon Japan. A security vulnerability exists in Canon imageCLASS MF644Cdw 10.02 printers, which originates from a failure to properly validate the length of user-supplied data before copying it to a...

(Pwn2Own) Canon imageCLASS MF644Cdw privet Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper...

Canon imageCLASS MF644Cdw 10.02 printers 缓冲区错误漏洞

Canon imageCLASS MF644Cdw is an intelligent and efficient 3-in-1 color multifunction printer from Canon Japan. A security vulnerability exists in Canon imageCLASS MF644Cdw 10.02 printers, which originates from a failure to properly validate the length of user-supplied data before copying it to a...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

Siemens Simcenter Femap BDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

KINGSOFT Internet Security 缓冲区错误漏洞

KINGSOFT Internet Security Kingsoft AntiVirus is an anti-virus program from the Chinese company KINGSOFT. A security vulnerability exists in KINGSOFT Internet Security 9 Plus version 2010.06.23.247, which originates from the presence of a boundary error in the software that results in a stack-bas...

Debian DLA-2947-1 : vim - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2947 advisory. Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and Null pointer dereferences may lead ...

RHEL 8 : glibc (RHSA-2022:0896)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0896 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow via MP4Box (CVE-2022-24575). Connected sources confirm GPAC upstream exposure; no vendor patch/mitigation details are provided in the supplied documents. The vulnerability impact is described as stack overflow in the MP4Box component; explic...