533 matches found
The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues allows a hacker to execute arbitrary code.
The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted UPDATE query...
Siemens SIMATIC RFID Readers Hidden Function Vulnerability (CNVD-2024-38007)
SIMATIC RF600 Readers are used for contactless identification of a variety of objects such as shipping containers, pallets, production goods, or often for recording bulk goods.SIMATIC RF1100 is an RFID-based solution for simple and versatile electronic authorization management.SIMATIC RF360R read...
CVE-2024-44572
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...
K000140882: OpenSSL vulnerability CVE-2024-5535
Security Advisory Description Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as...
Tenda FH1206 fromGstDhcpSetSer Function Buffer Overflow Vulnerability
The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 fromGstDhcpSetSer function suffers from a buffer overflow vulnerability that originates from the failure of the fromGstDhcpSetSer function in the /goform/GstDhcpSetSer page to correctly validate the length of the input data,...
CVE-2023-48194
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing setclientqos, control over the gp register can be obtained...
CVE-2024-36843
libmodbus v3.1.6 was discovered to contain a heap overflow via the modbusmappingfree function...
The vulnerability of Omron Sysmac Studio and CX-One software, which is related to the use of the “Free” function for the pointer not at the beginning of the buffer, allows a hacker to execute arbitrary code.
The vulnerability of Omron Sysmac Studio and CX-One software, which are used for automating and managing manufacturing processes, stems from the use of the “Free” function for the pointer not at the beginning of the buffer. Exploiting this vulnerability allows an attacker to execute arbitrary cod...
Siemens SIMATIC RTLS Locating Manager Hidden Function Vulnerability
SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A hidden function vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to an affected application containing hidde...
URL Manipulation
oceanic.js is vulnerable to a URL Manipulation. The vulnerability is due to improper input handling in certain functions such as Client.rest.channels.removeBan, which allows an attacker to manipulate the request specially crafted input to be normalized into unintended URLs, potentially resulting ...
The vulnerability of the `link_set_dsc_pps_packet()` function in the Linux kernel’s drivers/gpu/drm/amd/display/dc/link/link_dpms.c file allows a hacker to trigger a service failure.
The vulnerability of the linksetdscppspacket function in the Linux kernel’s drivers/gpu/drm/amd/display/dc/link/linkdpms.c file is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Tenda i21 formGetDiagnoseInfo function buffer overflow vulnerability
Tenda i21 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in Tenda i21 version 1.0.0.144656, which originates from the parameter cmdinput of the formGetDiagnoseInfo function that fails to correctly validate the length and size of the input data, and can be...
Roothub 安全漏洞
Roothub is a forum system developed using SSM and MySQL. A security vulnerability exists in Roothub v2.6, which was discovered to contain an SQL injection vulnerability via the "s" parameter in the search function...
WordPress Stop Spammers Security plugin <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process vulnerability
Cross-Site Request Forgery CSRF via sfsprocess vulnerability discovered by Lucio Sá in WordPress Plugin Stop Spammers versions = 2024.4...
PT-2024-30201 · Tenda · Tenda A301
Name of the Vulnerable Software and Affected Versions: Tenda A301 version 15.13.08.12 multi TDE01 Description: A critical issue affects the function formAddMacfilterRule of the file /goform/setBlackRule. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack...
CVE-2024-32764 myQNAPcloud Link
A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network. We have already fixed the vulnerability in the following version: myQNAPcloud...
The vulnerability of the analysis function of the EVCD software for VCD/EVCD GTKWave allows a perpetrator to execute arbitrary code.
The vulnerability of the EVCD analysis function in the VCD/EVCD GTKWave software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2024-30391
A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated network-based attacker to cause limited impact to the integrity or availability of the device. If a device...
CVE-2024-30391 Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed
A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated network-based attacker to cause limited impact to the integrity or availability of the device. If a device...