Base de CVEs

CVE-2023-24993 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815)

CVE-2023-24989 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811)

CVE-2023-24987 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809)

CVE-2023-24983 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19805)

CVE-2023-24984 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806)

CVE-2023-24982 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804)

CVE-2023-24981 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791)

CVE-2023-24980 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790)

CVE-2023-24979 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)....

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789)

CVE-2023-24560 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in Solid Edge SE2022 (All versions < V2210Update12), Solid...

A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process.

CVE-2022-47977 Alta · 7.8 CWE-787 14/02/2023

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All...

A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.

CVE-2023-25139 Crítica · 9.8 CWE-787 03/02/2023

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some...

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes.

CVE-2023-0341 Alta · 7.8 CWE-787 31/01/2023

Stack Buffer Overflow in editorconfig-core-c

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over the p_pcre buffer.

CVE-2022-3715 Alta · 7.8 CWE-787 05/01/2023

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid...

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.

CVE-2022-42475 Crítica · 9.8 KEV Urgente · 89 Exploit público Ransomware CWE-787 02/01/2023

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

CVE-2022-47518 Alta · 7.8 CWE-787 18/12/2022

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of...

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames.

CVE-2022-37903 Alta · 8.8 CWE-787 12/12/2022

Out-of-bounds Write em Arubanetworks Sd-wan

A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.

CVE-2022-35260 Média · 6.5 CWE-787 05/12/2022

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.

CVE-2022-37325 Alta · 7.5 CWE-787 05/12/2022

In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an...

In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.

CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022

Estouro de Buffer na Heap da GPU do Google Chromium

Estouro de buffer na heap em GPU no Google Chrome anterior à 107.0.5304.121 permitia que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)

CVE-2022-41128 Alta · 8.8 KEV Alta · 59 CWE-787 09/11/2022

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2022-41125 Alta · 7.8 KEV Alta · 54 CWE-787 09/11/2022

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVE-2022-41073 Alta · 7.8 KEV Alta · 64 Ransomware CWE-787 09/11/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-42827 Alta · 7.8 KEV Alta · 51 CWE-787 01/11/2022

Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVE-2022-43750 Média · 6.7 CWE-787 26/10/2022

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1...

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.