Missing Input Length Validation

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Missing Input Length Validation in the experimentname - passed to...

PT-2025-12176

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description A vulnerability allows an unauthenticated attacker to sign up with excessively large text in the name field, causing the Admin panel to become unresponsive. This prevents administrators from...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the parseExpression function in parser.go, due to the unrestricted size of input strings, which can cause the generation of large Abstract Syntax Trees ASTs. An attacker can crash...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a buffer overflow vulnerability that stems from the formWifiWpsOOB function failing to properly validate the length size of the input data, no details of the vulnerability are provided at this time...

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. Tenda AC6 v15.03.05.16 suffers from a buffer overflow vulnerability, which stems from the formWifiWpsOOB function failing to correctly validate the length of the input data, which can be exploited by an attacker to execute arbitra...

Tenda RX3 安全漏洞

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a buffer overflow vulnerability, which originates from the firewallEn parameter in /goform/SetFirewallCfg that fails ...

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

SUSE CVE-2025-0690

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to...

UBUNTU-CVE-2024-45781

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure...

CLSA-2025-1739825397 freerdp: Fix of 6 CVEs

CVE-2024-32458: fix missing input length checks - CVE-2024-32459: fix missing input length check - CVE-2024-32460: fix out-of-bound read in interleaveddecompress - CVE-2024-32039: fix integer overflow - CVE-2024-32040: fix missing check - CVE-2024-32041: fix integer overflow...

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Fix to not validate user input from setockopt Check the length of user input before copying data...

Tenda W18E 安全漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. The Tenda W18E suffers from a buffer overflow vulnerability that originates from the delWewifiPic function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on...

CVE-2024-10395

No proper validation of the length of user input in httpservergetcontenttypefromextension...

CVE-2025-22880

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

CVE-2024-10395 net: lib: http_server: Buffer Under-read

No proper validation of the length of user input in httpservergetcontenttypefromextension...

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr 3.7 and earlier versions that stems from a lack of proper validation of the length of user input...

Tenda A18 安全漏洞

Tenda A18 is an AC1200 dual-band Wi-Fi repeater from China's Tenda. A buffer overflow vulnerability exists in Tenda A18 15.13.07.09 and earlier versions, which stems from the parameter wpapskcrypto5g failing to correctly validate the length and size of the input data, and can be exploited by an...

UBUNTU-CVE-2024-57923

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix availin bytes for s390 zlib HW compression path Since the input data length passed to zlibcompressfolios can be arbitrary, always setting strm.availin to a multiple of PAGESIZE may cause read-in bytes to exceed t...

Internet Bug Bounty: CVE-2024-56374 Potential denial-of-service in IPv6 validation

CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation A potential denial-of-service vulnerability was discovered in the IPv6 validation functions of Django. The lack of an upper bound limit on the length of input strings passed to the private functions cleanipv6address and...