QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...

CVE-2024-37041: Buffer Copy without Checking Size of Input

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37044: Buffer Copy without Checking Size of Input

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

PT-2024-27256

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description A buffer copy without checking the size of input issue has been reported, potentially allowing remote attackers with...

QNAP Systems QTS和QNAP Systems QuTS hero安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...

The vulnerability in the wlg_adv.cgi script of Netgear’s router microprogramming software for models R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the wlgadv.cgi script of Netgear’s router microprogramming devices, such as R8500, XR300, R7000P, and R6400 v2, stems from the copying of buffers without checking the size of the input data during the processing of parameters apmodedns1pri and apmodedns1sec. Exploiting this...

CVE-2024-50131: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL...

CVE-2024-38423 Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch...

CVE-2024-38423 Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size...

CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size...

CVE-2024-33030: Buffer Copy without Checking Size of Input

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size...

CVE-2024-38409: Buffer Copy without Checking Size of Input

Memory corruption while station LL statistic handling...

CVE-2024-44234: Buffer Copy without Checking Size of Input

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected...

CVE-2024-44233: Buffer Copy without Checking Size of Input

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected...

CVE-2024-44232: Buffer Copy without Checking Size of Input

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected...

CVE-2024-48289: Buffer Copy without Checking Size of Input

An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of Service DoS via supplying a crafted LLPAUSEENCREQ packet...