Security
Headlines
HeadlinesLatestCVEs

Tag

#buffer_overflow

CVE-2023-32674: HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware – Potential Buffer Overflow, Elevation of Privilege

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.

CVE
#vulnerability#windows#php#buffer_overflow
CVE-2023-34942: cve/MAC_Address_StackBOF.md at main · OlivierLaflamme/cve

** UNSUPPORTED WHEN ASSIGNED ** Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2023-34940: cve/URLFilterList_Stack_BOF.md at main · OlivierLaflamme/cve

** UNSUPPORTED WHEN ASSIGNED ** Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

strongSwan VPN Charon Server Buffer Overflow

Proof of concept exploit for a buffer overflow in strongSwan VPN's charon server.

librelp Remote Code Execution

Proof of concept exploit for a buffer overflow remote code execution vulnerability in librelp.

CVE-2023-34364: Develop, Deploy & Manage High-Impact Business Apps | Progress Software

A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun the buffer allocated to process the string value. This allows an attacker to execute code of their choice on an affected host by copying carefully selected data that will be executed as code.

RenderDoc 1.26 Local Privilege Escalation / Remote Code Execution

RenderDoc versions 1.26 and below suffer from integer underflow, integer overflow, and symlink vulnerabilities.

CVE-2023-25177

Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code.

CVE-2023-1709: SSA-629917

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.