1316 matches found
CVE-2021-28973: Improper Restriction of XML External Entity Reference
The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...
CVE-2021-1251: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...
CVE-2021-1308: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would...
CVE-2020-11305: Improper Restriction of Operations within the Bounds of a Memory Buffer
Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...
Design/Logic Flaw
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System IGSS Definition Def.exe V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF Configuration Group File file i...
Schneider Electric IGSS SCADA Software
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...
CVE-2021-22711: Improper Restriction of Operations within the Bounds of a Memory Buffer
A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System IGSS Definition Def.exe V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF Configuration Group File file i...
NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Multiple Vulnerabilities (NS-SA-2021-0018)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has curl packages installed that are affected by multiple vulnerabilities: - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 - curl 7.20.0 through 7.70.0 is vulnerable to improper...
NewStart CGSL MAIN 6.02 : curl Vulnerability (NS-SA-2021-0067)
The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by a vulnerability: - curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used...
CVE-2021-28036: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures...
CVE-2021-23976: Improper Restriction of Rendered UI Layers or Frames
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on...
CVE-2021-20635
CVE-2021-20635 affects LOGITEC LAN-WH450N/GR. The vulnerability is an improper restriction of excessive authentication attempts, enabling an attacker within wireless range to recover the PIN and gain network access. The issue is documented across multiple feeds (NVD/Red Hat/JVN) with reported imp...
CVE-2021-20635: Improper Restriction of Excessive Authentication Attempts
Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network...
CVE-2020-28144
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code...
CVE-2020-28144
The CVE-2020-28144 entry concerns Moxa EDR-G903 (Firmware ≤ 5.5), EDR-G902 (Firmware ≤ 5.5), and EDR-810 (Firmware ≤ 5.6). The vulnerability is due to an improper restriction of operations, where crafted requests may enable remote arbitrary code execution. The connected sources confirm the affect...
CVE-2021-1131: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause an affected IP camera to reload. The vulnerability is due to missing checks when Cisco Discovery Protocol messages are...
CVE-2021-1267: Improper Restriction of Recursive Entity References in DTDs
A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...
CVE-2020-9140: Improper Restriction of Operations within the Bounds of a Memory Buffer
There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer overflow occurs...
CVE-2020-16032: Improper Restriction of Rendered UI Layers or Frames
Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...