15730 matches found
CVE-2024-3160
Intelbras MHDX series (1004, 1008, 1016, 5016) and HDCVI 1008/1016 are reported to be affected by a vulnerability in the HTTP GET Request Handler, involving an unknown part of the file /cap.js. The flaw enables information disclosure and can be triggered remotely. Affected versions are up to 2024...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security flaw in amdgpumcasmugetmcaentry...
PT-2024-4252 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: UPX versions up to 4.2.2 Description: A critical issue affects the get ne64 function of the bele.h file, leading to a heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The vendor was contacted early abo...
The vulnerability of the virtual learning environment Moodle, related to the lack of security measures for the website structure, allows attackers to gain access to read, modify, or delete data, as well as execute cross-site attacks.
The vulnerability in the virtual training environment Moodle is related to the lack of measures taken to protect the structure of the web page during the processing of the GET /?lang= parameter. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, or delete...
Delta Electronics DIAEnergie SQL注入漏洞
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. Delta Electronics DIAEnergie GetDIAEusList suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end...
The vulnerability of the get_number() function in the Vim text editor allows a hacker to trigger a service failure.
The vulnerability of the getnumber function in the Vim text editor relates to the use of the z= command. Users can overflow the counter with values exceeding MAXINT. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the smart.disk.get component in the universal monitoring system Zabbix allows a attacker to execute arbitrary code.
The vulnerability of the smart.disk.get component in the universal monitoring system of Zabbix is related to the introduction of malicious code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SUSE CVE-2024-3024
A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclose...
Tenda FH1203 GetParentControlInfo Method Stack Buffer Overflow Vulnerability
Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo...
CVE-2023-25341
A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...
CVE-2024-29229
Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors...
Synology Surveillance Station 安全漏洞
Synology Surveillance Station is an application from Synology, a Chinese company. It provides intelligent monitoring and video management tools to protect your valuable assets. A security vulnerability previously existed in Synology Surveillance Station version 9.2.0-11289, which stemmed from a...
CVE-2023-25341
A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...
CVE-2023-25341
A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...
CVE-2023-25341
The CVE describes a Directory Traversal in Ladle Dev Server (versions 2.5.1 and earlier) that allows an attacker on the same network to read files accessible to the user via GET requests. Red Hat, NVD, CNNVD, and related enrichments corroborate the same impact. No exploit details are provided in ...
CVE-2024-26651
In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnetgetendpoints Add check for usbnetgetendpoints and return the error if it fails in order to transfer the error...
DEBIAN-CVE-2023-45922
glxpbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling glXGetDrawableAttribute. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...
SUSE CVE-2021-47159
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if -getssetcount fails If ds-ops-getssetcount fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value...