CVE-2017-16271

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

PT-2023-10567 · Unknown +1 · Insteon Hub +1

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...

CVE-2022-20775

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted...

The vulnerability of Siemens’ TFTP-server implementation for software and software-hardware products arises from the operation that goes beyond buffer boundaries in memory, allowing attackers to gain access to protected information.

The vulnerability of the TFTP server implementation for Siemens’ software and software-hardware products lies in the fact that the operation is carried out outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to protected information by sending...

The vulnerability of the Internet Information Services FTP network services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Internet Information Services FTP protocol in Windows operating systems is related to errors during FTP data exchange. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using specially crafted FTP commands...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

CVE-2022-20665

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

CVE-2022-20665 Cisco StarOS Command Injection Vulnerability

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

CVE-2022-20665

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

Dell EMC Unity Command Injection Vulnerability

Dell EMC Unity is a unified storage array product from Dell DELL USA. Dell EMC Unity suffers from a command injection vulnerability that originates from a network system or product that does not properly validate incoming data. An attacker could exploit the vulnerability to run crafted commands a...

The vulnerability of the Cisco NX-OS network operating system for Cisco routers, related to access control deficiencies, allows a intruder to gain read-only access to data.

The vulnerability of the Cisco NX-OS network operating system for Cisco routers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read access to data by executing specially crafted commands...

CVE-2021-42759

A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands...

AZL-6344 CVE-2021-42376 affecting package busybox for versions less than 1.35.0-1

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

CVE-2020-12488

The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission...

vivo Jovi Smart Scene 安全漏洞

Vivo Jovi Smart Scene is used by China's Vivo to provide users with efficient, interactive and decision-making personalized services. The vivo Jovi Smart Scene suffers from a security vulnerability that allows an attacker to access sensitive information stored in the jovi Smart Scene module by...

redis: Integer overflow bug in the ziplist data structure

An integer overflow issue was found in the redis ziplist data structure. The vulnerability involves modifying the default ziplist configuration parameters hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value to a very large value, and then...

redis: Integer overflow issue with intsets

An integer overflow issue was found in redis. The vulnerability involves changing the default "set-max-intset-entries" configuration parameter to a very large value and constructing specially crafted commands to manipulate sets. This flaw allows a remote attacker to leak arbitrary contents of the...

redis: Integer overflow issue with intsets

An integer overflow issue was found in redis. The vulnerability involves changing the default "set-max-intset-entries" configuration parameter to a very large value and constructing specially crafted commands to manipulate sets. This flaw allows a remote attacker to leak arbitrary contents of the...

DEBIAN-CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

The vulnerability of the syntax analyzer in the Cisco IOS XE and Cisco IOS operating systems’ command-line TrustSec CLI allows a attacker to trigger a service failure.

The vulnerability of the syntax analyzer in the Cisco IOS XE and Cisco IOS operating systems’ command-line interface is related to improper interaction between the user web interface and the command-line interface. Exploiting this vulnerability allows a malicious actor to trigger a service failur...