18 matches found
CVE-2018-9564
In llcputilparselinkparams of llcputil.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
MAL-2025-9564 Malicious code in @tiktok-frontend/app-center-connect (npm)
The package @tiktok-frontend/app-center-connect was found to contain malicious code...
CVE-2024-9564
creationtimestamp| type| source ---|---|--- 2024-10-07 04:15:19+00:00| seen| https://t.me/cvedetector/7196...
CVE-2024-9564
A vulnerability, which was classified as critical, was found in D-Link DIR-605L 2.13B01 BETA. Affected is the function formWlanWizardSetup of the file /goform/formWlanWizardSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-9564 D-Link DIR-605L formWlanWizardSetup buffer overflow
A vulnerability, which was classified as critical, was found in D-Link DIR-605L 2.13B01 BETA. Affected is the function formWlanWizardSetup of the file /goform/formWlanWizardSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-9564
CVE-2024-9564 affects D-Link DIR-605L firmware (2.13B01 BETA). The vulnerability is in the function formWlanWizardSetup (file /goform/formWlanWizardSetup) where unvalidated input in the webpage argument leads to a buffer overflow. This can be triggered remotely and, per the disclosures, an exploi...
Oracle Linux 8 : libgcrypt (ELSA-2022-9564)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9564 advisory. 1.8.5-7fips - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations Orabug: 33081130 - Change Epoch from 1 to 10 1.8.5-7 - Fix CVE-2021-3356...
CVE-2019-9564
CVE-2019-9564 describes an authentication bypass in Wyze Cam Pan v2, Wyze Cam v2, and Wyze Cam v3 that lets an attacker bypass login and control devices. Connected sources confirm affected models and vulnerable builds prior to specific firmware versions: Pan v2 < 4.49.1.47, Cam v2 < 4.9.8.1...
Adobe Bridge 10.x < 10.0.4 Multiple Vulnerabilities (APSB20-19)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-19 advisory. - Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful...
Adobe Bridge 10.x < 10.0.4 Multiple Vulnerabilities (APSB20-19)
The version of Adobe Bridge installed on the remote Windows host is prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-19 advisory. - Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitatio...
CVE-2020-9564
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2020-9564
Adobe Bridge 10.x (10.0.1 and earlier) is affected by an out-of-bounds write that could lead to arbitrary code execution if exploited locally. Multiple connected sources (Adobe APSB20-19 advisory, Red Hat CVE entry, and NVD listing) corroborate this CVE-2020-9564, with the noted vulnerability in ...
CVE-2020-9564
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2018-9564
CVE-2018-9564 affects Android via an out-of-bounds read in llcp_util_parse_link_params (llcp_util.cc), caused by a missing bounds check. This can lead to local information disclosure without executing user-supplied code. Affected Android versions include 7.0–9 (Android-7.0, 7.1.1, 7.1.2, 8.0, 8.1...
CVE-2017-9564
CVE-2017-9564 affects the iOS app community-banks-cb2go/id445828071, version 3.1.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The ...
CVE-2016-9564
Boa Webserver 0.92r contains a buffer overflow in the send_redirect() function that can be triggered by a crafted HTTP GET request with a long URI composed only of '/' and '.' characters, leading to a denial-of-service condition. Multiple sources (NVD, CNVD, CVE records, and vendor write-ups) cor...
Atlassian Confluence Server 5.9.x < 5.9.3 RCE
Binary data 9564.prm...
SuSE 11.3 Security Update : krb5 (SAT Patch Number 9564)
The following security issues have been fixed in kerberos 5 : - Two denial of service flaws when handling RFC 1964 tokens. CVE-2014-4341 / CVE-2014-4342 - Multiple flaws in SPNEGO. CVE-2014-4343 / CVE-2014-4344 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...