5279 matches found
SUSE CVE-2019-9774
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bitreadB at bits.c...
SUSE CVE-2020-13428
A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 for macOS/iOS allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted H.264 Annex-B video .avi for example...
B&R Systems Diagnostics Manager Cross Site Scripting
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple XSS Vulnerabilities product: B&R Systems Diagnostics Manager vulnerable version: =3.00 and =D4.93 CVE number: CVE-2022-4286 impact: medium homepage:...
Cross site scripting
A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...
CVE-2022-4286 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime
A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...
CVE-2022-4286
Summary: CVE-2022-4286 affects B&R Automation Runtime’s System Diagnostics Manager, with vulnerable versions 3.00 through C4.93. A reflected XSS allows a remote attacker to execute arbitrary JavaScript in the victim’s browser session. The root cause is improper neutralization of input during web ...
CVE-2022-4286 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime
A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...
D-Link DIR-825 Rev B <= 2.10b02 NULL Pointer Dereference Vulnerability
D-Link DIR-825 Rev. B devices are prone to a NULL pointer dereference vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-43764
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...
CVE-2022-43762
Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...
CVE-2022-43765
B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...
CVE-2022-43765
B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...
CVE-2022-43763
Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...
Design/Logic Flaw
Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...
Buffer overflow
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...
Code injection
Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...
CVE-2022-43765 DoS in APROLs Tbase server
B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...
CVE-2022-43765 DoS in APROLs Tbase server
B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...
CVE-2022-43765
B&R APROL (before R 4.2-07) is affected by a DoS vulnerability in the Tbase database server. The issue stems from incorrect checking of a return value when processing specially formatted data packets sent to port 55502/tcp, which can be exploited remotely to cause an application DoS. Affected sof...