11440 matches found
PT-2024-9104 · Fuji Electric · Fuji Electric Monitouch V-Sft
Name of the Vulnerable Software and Affected Versions: Fuji Electric Monitouch V-SFT affected versions not specified Description: The issue is related to an out-of-bounds write in the parsing of V9C files, which can be exploited by remote attackers to execute arbitrary code on affected...
The vulnerability of the hns3 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the hns3 component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the hns3getcoalinfo function. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2020-12492
Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information...
PT-2024-35784 · Unknown · Masterstack Imgcap
Name of the Vulnerable Software and Affected Versions: masterstack imgcap version 0.0.1 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the "/submit" endpoint. Recommendations: For masterstack imgcap version 0.0.1, as a temporary workaround, consider...
CVE-2024-11229
creationtimestamp| type| source ---|---|--- 2024-11-23 11:42:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113532087565057168...
CVE-2024-53092
In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...
SUSE CVE-2024-53092
In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...
The vulnerability of the msp_info_htm function in D-Link DI-8400 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the mspinfohtm function in D-Link DI-8400 router microprogramming software is related to the lack of measures taken to neutralize special elements used in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands when processing the flag a...
DEBIAN-CVE-2024-53092
In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...
CVE-2024-53092 virtio_pci: Fix admin vq cleanup by using correct info pointer
In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...
CVE-2024-53092
In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...
CVE-2024-51151
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...
D-Link DI-8200 安全漏洞
The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...
CVE-2018-9482
In intrdatacopycb of btifhd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...
SUSE CVE-2024-52303
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each...
CVE-2018-9467
creationtimestamp| type| source ---|---|--- 2024-11-20 02:02:33+00:00| seen| https://t.me/cvedetector/11555 2026-06-21 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosdipjdv22m...
PT-2024-8579 · D Link · D-Link Di-8400
Name of the Vulnerable Software and Affected Versions: D-LINK DI-8400 version 16.07.26A1 Description: The issue is related to the msp info htm function in the D-LINK DI-8400 router's firmware, which does not properly neutralize special elements used in a command. This can be exploited by a remote...
PT-2024-35281 · Unknown · Quick Learn
Name of the Vulnerable Software and Affected Versions: Quick Learn versions n/a through 1.0.1 Description: The issue is related to an Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution', which allows Object Injection. This is a type of...
PT-2024-16744 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a rejected CVE candidate due to an error, with all references and descriptions...