743 matches found
Ashlar Vellum Graphite 安全漏洞
Ashlar Vellum Graphite is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Graphite that stems from a failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. An attacker could exploit the vulnerability to...
Ashlar Vellum Graphite 安全漏洞
Ashlar Vellum Graphite is a CAD modeling software from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Graphite that stems from a failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. An attacker could exploit the vulnerability to...
Ashlar Vellum Cobalt 安全漏洞
Ashlar Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar, Inc. A security vulnerability exists in Ashlar Vellum Cobalt that stems from the failure to properly validate the length of user-supplied data before copying it to a stack-based buffer. An attacke...
CVE-2024-8798 Bluetooth: classic: avdtp: missing buffer length check
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
PT-2024-39262
Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue is related to improper validation of the length of user input in the olcp ind handler function in zephyr/subsys/bluetooth/services/ots/ots client.c. This lack of validation can lea...
Fuji Electric Monitouch V-SFT 安全漏洞
Fuji Electric Monitouch V-SFT is a configuration software for Human Machine Interfaces HMI provided by Fuji Electric. Fuji Electric Monitouch V-SFT suffers from a buffer overflow vulnerability that originates from not properly validating the length of user-supplied data before copying it into a...
NetGear RAX30 安全漏洞
The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a buffer overflow vulnerability that stems from a lack of validation of the length of user-supplied data, which can be exploited by an attacker to execute arbitrary code...
Tenda G3 缓冲区错误漏洞
Tenda G3 is a Qos Vpn router from Tenda China. The Tenda G3 suffers from a buffer overflow vulnerability that originates from the formSetPortMapping function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on the system or cau...
GHSA-X8JH-XJ3X-GX3C `fast-float` has multiple soundness issues
fast-float contains multiple soundness issues: 1. Undefined behavior when checking input length, which has been merged but no package pubished. 1. Many functions marked as safe with non-local safety guarantees The library is also unmaintained. Alternatives For quickly parsing floating-point numbe...
Tenda AC6 安全漏洞
The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 v2.0 V15.03.06.50, which originates from a failure to properly validate the length of input data in the formSetPPTPServer function, and can be exploited by a remote attacker to...
PT-2024-40925 · Unknown · Fast-Float
Name of the Vulnerable Software and Affected Versions: fast-float affected versions not specified Description: The fast-float library contains soundness issues, including undefined behavior when checking input length and functions marked as safe with non-local safety guarantees. The library is al...
The vulnerability of the tcp_metrics_nl_policy structure in the Linux operating system’s kernel-based IPv4 protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tcpmetricsnlpolicy structure in the net/ipv4/tcpmetrics.c file of the Linux operating system’s IPv4 protocol implementation is related to the lack of checks on the length of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
PT-2024-32914 · Delta Electronics · Cncsoft-G2
Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This allows an attacker...
D-Link DIR-605L 安全漏洞
The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formEasySetPassword function in the /goform/formEasySetPassword page that fails to correctly validate the length of the...
UBUNTU-CVE-2024-6444
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c that does not properly validate the length of user input...
snappy-java: Unchecked chunk length leads to DoS
A flaw was found in Snappy-java's fileSnappyInputStream hasNextChunk function, which does not sufficiently evaluate input bytes before beginning operations. This issue could allow an attacker to send malicious input to trigger an out of memory error that crashes the program, resulting in a denial...
DrayTek Vigor 3910 安全漏洞
The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which is caused by the sPPPSrvNm parameter on the fwuser.cgi page not properly validating the length of the input data, and can be...
The vulnerability of the django.utils.html.urlize() function in the Django web application framework allows a attacker to trigger a denial-of-service attack.
The vulnerability of the django.utils.html.urlize function in the Django web application framework is related to inconsistencies in the parameters related to input data length. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
USN-7000-2 expat vulnerabilities
USN-7000-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: Shang-Hung Wan discovered that Expat did not properly handle certain function calls when a negative input length was provided. An attacker could use this issu...