CWE:

	Topic	Date	Author
High	TP-LINK TDDP Buffer Overflow / Missing Authentication	23.11.2016	Andres Lopez Luksenber...
High	Opera 10.01 Remote Array Overrun (Arbitrary code execution)	24.11.2009	Maksymilian Arciemowic...
High	KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution)	24.11.2009	Maksymilian Arciemowic...
High	K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)	24.11.2009	Maksymilian Arciemowic...
High	SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)	20.11.2009	Maksymilian Arciemowic...

---

CVEMAP Search Results

CVE

Details

Description

2023-08-31

CVE-2023-40589

Updating...

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions there is a Global-Buffer-Overflow in the ncrush_decompress function. Feeding crafted input into this function can trigger the overflow which has only been shown to cause a crash. This issue has been addressed in versions 2.11.0 and 3.0.0-beta3. Users are advised to upgrade. There are no known workarounds for this issue.

2023-08-25

	CVE-2023-40166	Updating...	Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
	CVE-2023-40164	Updating...	Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
	CVE-2023-40036	Updating...	Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
	CVE-2023-40031	Updating...	Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++.

2023-08-23

CVE-2022-3742

Updating...

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.

2023-08-17

	CVE-2023-4029	Updating...	A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
	CVE-2023-4028	Updating...	A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
	CVE-2023-34419	Updating...	A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

2023-07-21

CVE-2022-41793

Updating...

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

 

---

Copyright 2023, cxsecurity.com