47 matches found
CVE-2019-13114
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...
CVE-2019-13114
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...
CVE-2019-13114
CVE-2019-13114 affects Exiv2: http.c in versions up to 0.27.1 can crash via a crafted HTTP response missing a space, causing a denial of service. Public references in Debian/AlmaLinux/Fedora advisories confirm the issue and indicate a fix in 0.27.2. Exploitation details are not provided beyond th...
CVE-2017-13114
This CVE entry is rejected/not used; the candidate number should not be used.
CVE-2018-13114
Missing authentication and improper input validation in KERUI Wifi Endoscope Camera YPC99 allow an attacker to execute arbitrary commands with a length limit of 19 characters via the "ssid" value, as demonstrated by ssid:;ping 192.168.1.2 in the body of a SETSSID command...
CVE-2018-13114
CVE-2018-13114 affects the KERUI Wifi Endoscope Camera (YPC99). The issue arises from missing authentication and improper input validation in the device’s SETSSID handling, enabling an attacker to inject commands through the ssid field (example: ssid:;ping 192.168.1.2) with a command length limit...