EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-2652)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to cra...

CVE-2023-0437 MongoDB client C Driver may infinitely loop when validating certain BSON input data

When calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0...

Tenda A18 Buffer Overflow Vulnerability

Tenda A18 is an AC1200 dual-band Wi-Fi repeater from China's Tenda. A buffer overflow vulnerability exists in Tenda A18 version v15.13.07.09, which originates from the devName parameter in the formSetDeviceName function failing to correctly validate the length of the input data, and can be...

Totolink NR1800X Buffer Overflow Vulnerability

TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. The Totolink NR1800X version 9.1.0u.6279B20210910 suffers from a buffer overflow vulnerability, which originates fr...

TOTOLINK N350RT Buffer Overflow Vulnerability

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. The TOTOLINK N350RT suffers from a buffer overflow vulnerability, which originates from the parameter v33 of the function main in /cgi-bin/cstecgi.cgi?action=login&flag=1 that fails to correctly validate the length...

JFinalCMS 安全漏洞

JFinalCMS is a content management system. A cross-site scripting vulnerability exists in JFinalcms version 5.0.0, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to run arbitrary code when creating a new custom...

Zabbix icmpping Code Execution

The vulnerability of the icmpping function in the Zabbix universal monitoring system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tenda i29 spdtstConfigAndStart method buffer overflow vulnerability

The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the ip parameter of the spdtstConfigAndStart method failing to properly validate the length and size of the input data, which can be exploited by a...

Tenda i29 sysScheduleRebootSet method buffer overflow vulnerability

The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the rebootTime parameter of the sysScheduleRebootSet method failing to correctly validate the length of the input data, which can be exploited by a...

5G MediaTek Wireless Communication Module DoS

The vulnerability of 5G wireless communication modules by MediaTek is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

HCI SCI DoS

The vulnerabilities of HCI Host Controller Interface and SCI interfaces, which operate according to the IEC 60870-5-104 standard, in Hitachi Energy RTU500 programmable logic controllers, are related to insufficient verification of input data. Exploiting these vulnerabilities can allow an attacker...

PT-2023-9243

Name of the Vulnerable Software and Affected Versions MasterSCADA 4D affected versions not specified Description The issue is related to errors in processing input data in the MasterSCADA 4D SCADA system. Exploitation of this issue could allow a remote attacker to cause a denial of service...

Tenda AX9 /goform/setMacFilterCfg Interface Buffer Overflow Vulnerability

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "deviceList" parameter of /goform/setMacFilterCfg not properly validating the length of the input data. could be exploited by a remote attacker to execu...

protection system SEL-451 phase-change relay Input Verification Failure

The vulnerability of the microprogrammed protection system for the SEL-451 phase-change relay exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions and lock out arbitrary services...

SEL-411L Phase-Change Relay Information Disclosure

The vulnerability of the microprogrammed protection software of the Schweitzer Engineering Laboratories SEL-411L phase-change relay exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

Windows Distributed File System Code Execution

The vulnerability of the distributed file system in the Windows operating system is related to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Python IBM AIX DoS

The vulnerability of the Python programming language implementation in the IBM AIX operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

ated_tp Code Execution

The vulnerability of TP-Link TL-WR841N router’s atedtp microprogramming system exists due to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20231115-04

Visual Studio Coden source code editor vulnerability related to improper control of code generation. code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Visual Studio Code source code editor vulnerability is related to insufficient protection of...

ROS-20231115-01

A vulnerability in the Squid proxy server related to the execution of a "buffer overflow" attack, writing up to 2MB of of arbitrary data to the memory heap when Squid is configured to accept HTTP Digest Authentication. Exploitation of the vulnerability could allow an attacker acting remotely to...