Stack overflow

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

Zephyr 缓冲区错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr. An attacker exploited the vulnerability to trigger an out-of-bounds write vulnerability during configuration...

CVE-2022-34115

DataEase v1.11.1 is affected by a SQL injection vulnerability via the dataSourceId parameter. The issue is tracked as CVE-2022-34115; it is reported as critical (CVSS 3.1: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A fix is available in v1.11.2. The connected sources also reference advisories and...

PT-2022-3685 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 17.2.1 and earlier Adobe InDesign versions 16.4.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in Adobe InDesign, which could allow an attacker to execute arbitrary code in the...

Siemens Simcenter Femap Out-of-Bounds Write Vulnerability (CNVD-2022-51431)

An out-of-bounds write vulnerability exists in Siemens Simcenter Femap, an advanced simulation application for creating, editing, and inspecting finite element models of complex products or systems, which can be exploited by attackers to execute code in the context of the current process...

CVE-2022-34742

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-34742

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.An out-of-bounds write vulnerability exists in Siemens PADS Standard/Plus Viewer, which could be exploited by an attacker to execute code in the context of the current...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.An out-of-bounds write vulnerability exists in Siemens PADS Standard/Plus Viewer, which could be exploited by an attacker to execute code in the context of the current...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.An out-of-bounds write vulnerability exists in Siemens PADS Standard/Plus Viewer, which could be exploited by an attacker to execute code in the context of the current...

CVE-2022-34742

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-34742

The CVE-2022-34742 entry corresponds to a read/write vulnerability in the HarmonyOS system module that may impact data confidentiality. Connected sources describe the issue as a vulnerability in the system module with potential confidential data exposure, with CVSS information indicating a networ...

PT-2022-22311 · Unknown · System Module

Name of the Vulnerable Software and Affected Versions: System module affected versions not specified Description: The system module has a read/write vulnerability. Successful exploitation of this issue may affect data confidentiality. Recommendations: At the moment, there is no information about ...

Huawei EulerOS: Security Advisory for gzip (EulerOS-SA-2022-1968)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21783

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704482...

PT-2022-15105 · Ccci · Ccci

Name of the Vulnerable Software and Affected Versions: CCCI affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in CCCI. This could lead to local escalation of privilege, with System execution privileges needed. User...

gzip security update

1.10-9 - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271...

GHSA-29Q6-P2CG-4V23 Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin

Pipeline: Input Step Plugin 448.v37cea9a10a70 and earlier allows Pipeline authors to specify file parameters for Pipeline input steps even though they are unsupported. Although the uploaded file is not copied to the workspace, Jenkins archives the file on the controller as part of build metadata...

Cross site scripting

Adobe InDesign versions 17.2.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Cross site scripting

Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...