Schneider Electric IGSS 安全漏洞

Schneider Electric IGSS is a multi-player collaborative application from the French company Schneider Electric. A security vulnerability exists in Schneider Electric IGSS Data Collector v15.0.0.21243 and prior versions, which stems from a lack of length checking of user-supplied data. An attacker...

The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to execute arbitrary code.

The vulnerability of TCP/IP client applications of NicheLite and InterNiche lies in errors during the processing of input data length parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to induce a service failure.

The vulnerability of TCP/IP client applications of NicheLite and InterNiche lies in errors during the processing of input data length parameters. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the extract_name() function (rfc1035.c): The Dnsmasq DNS server has a vulnerability related to the failure of operations beyond the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability of the extractname function rfc1035.c in the Dnsmasq DNS server is related to the lack of length checking on input data. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the sevenz archive software package from Apache Commons Compress allows a hacker to trigger a service failure.

The vulnerability of the sevenz archive software package from Apache Commons Compress is related to errors in processing parameter values related to the length of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Apache Commons Compress compression service allows a attacker to cause a service failure.

The vulnerability of the Apache Commons Compress compression service is related to errors in processing parameter settings related to the length of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2021-1097

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to...

CVE-2021-1097

CVE-2021-1097 affects NVIDIA vGPU software, specifically the Virtual GPU Manager (vGPU plugin). The flaw arises from improper validation of the length field in a guest request, allowing a malicious guest to send a length inconsistent with input, potentially leading to information disclosure, data...

CVE-2021-34829

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...

D-Link DAP-1330 缓冲区错误漏洞

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. The D-Link DAP-1330 suffers from a buffer error vulnerability that arises from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker could exploit...

PT-2021-3726

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.19 through 1.21 Confluence Data Center versions from 7.19.23 to 8.9.3 Confluence Data Center versions from 8.5.10 to 8.5.11 Confluence Server versions from 7.19.23 to 7.19.24 Confluence Server versions from...

PT-2021-3725

Name of the Vulnerable Software and Affected Versions Apache Commons Compress versions 1.19 through 1.21 Apache Commons Compress version 1.22 Confluence Data Center versions from 7.19.23 to 8.9.3 Confluence Data Center versions from 8.5.10 to 8.5.11 Confluence Server versions from 7.19.23 to...

Regular Expression Denial Of Service (ReDOS)

Vfsjfilechooser2 is vulnerable to regular expression denial of service. Lack of proper handling of specials chars in passwords and limiting the input length on regex patterns allows an attacker to input malicious URIs to cause an application crash...

CVE-2020-15379

Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for custom field name...

IGSS Definition 缓冲区错误漏洞

The Schneider Electric Interactive Graphical SCADA System IGSS is an advanced SCADA system for monitoring and controlling industrial processes. A security vulnerability exists in the Definition module of Interactive Graphical SCADA System IGSS versions 15.0.0.21140 and earlier. The vulnerability...

Google Android输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from an input validation error vulnerability that stems from the program's lack of checking the length of user-supplied data. qcm4290, qcs2290, qcs405, qcs410, qcs4290, qcs61...

brotli: buffer overflow when input chunk is larger than 2GiB

A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a "one-shot" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB...

CVE-2021-1084

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service. This affects vGPU version 12.x prior to 12.2 and version 11...

CVE-2021-1082

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and version 8.x prior to ...

CVE-2021-1081

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x prior to 12.2, version 11...