H3C Magic B1STV100R012 缓冲区错误漏洞

The H3C Magic B1STV100R012 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B1STV100R012 version. An attacker exploits the vulnerability to trigger a denial of service DoS via a specially crafted POST request...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a missing null check in BuildSetConfig of the protocolimsbuilder.cpp file, which may be read out-of-bounds...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.7, which stems from a faulty flsetgeneveopt in net/sched/clsflower.c that allows out-of-bounds writing ...

X.Org libX11 缓冲区错误漏洞

X.Org libX11 is an X11 X Window System client library from the X.org Foundation. A security vulnerability exists in X.Org libX11 that stems from not checking the values of Request, Event, and Error IDs in src/InitExt.c. The vulnerability is caused by the following...

jtidy 缓冲区错误漏洞

jtidy is an application by Archimedes Trajano Individual Developer. A security vulnerability exists in jtidy r938 and prior versions, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with circular dependencies...

hjson-java 缓冲区错误漏洞

hjson-java is Hjson open source a json, java conversion library . A security vulnerability exists in hjson-java 3.0.0 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with circular dependencies...

pbJson 缓冲区错误漏洞

pbJson is an Inductive AS open source JSON library written in Java and compatible with progsbase. A security vulnerability exists in pbJson 0.4.0 and earlier versions that originated from allowing an attacker to cause a denial of service through the use of objects with cyclic dependencies...

JJSON 缓冲区错误漏洞

JJSON is a pure Java library for handling JSON by Christian Grobmeier, a personal developer. A security vulnerability exists in JJSON version 0.1.7 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

mJson 缓冲区错误漏洞

mJson is an extremely lightweight Java JSON library from Borislav Iordanov's personal developer. A security vulnerability exists in mJson 1.4.1 and earlier versions that allows an attacker to cause a denial of service by using objects with circular dependencies...

JSONUtil 缓冲区错误漏洞

JSONUtil is a library of JSON generation and parsing utilities for Java from the individual developer Bill Davidson. A security vulnerability exists in JSONUtil 5.0 and earlier versions that could allow an attacker to cause a denial of service through the use of circularly dependent objects...

Genson 缓冲区错误漏洞

Genson is owlike open source a complete json, java conversion library . Genson 1.6 and earlier versions of a security vulnerability , the vulnerability stems from allowing an attacker to cause a denial of service through the use of circular dependencies on the object...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer error vulnerability exists in Contiki-NG 4.8 and earlier versions, which stems from an out-of-bounds read issue when processing ICMP DAO input...

Zoom Client 缓冲区错误漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows clients prior to version 5.14.0, which stems from an incorrect operation limit in the memory buffer...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. Contiki-NG suffers from a buffer error vulnerability that stems from the fact that when reading TCP MSS option values from incoming packets, the Contiki-NG operating system does not...

PT-2023-24788 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...

Google protobuf 缓冲区错误漏洞

Google protobuf is a data exchange format from Google Inc. in the United States. A security vulnerability exists in protobuf, which stems from a potential panic when parsing invalid messages...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation, USA. A buffer error vulnerability exists in Horner Automation Cscape v9.90 SP8 and Cscape EnvisionRV v4.70, which stems from a lack of proper validation of user-supplied...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the vcu module of the MediaTek chips, which arises from a competitive condition that could allow out-of-bounds writes...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape v9.90 SP8 and Cscape EnvisionRV v4.70, which stems from an inability to properly validate user-supplied dat...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape v9.90 SP8 and Cscape EnvisionRV v4.70, which stems from a lack of proper validation of user-supplied data...