MySQL InnoDB DoS

The vulnerability of the InnoDB component in the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Oracle Business Intelligence Enterprise Edition Analytics Server Service Outage

The vulnerability of the Analytics Server component of the Oracle Business Intelligence Enterprise Edition software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a partial service outage...

TOTOLINK A3300R Router Code Execution

The vulnerability of the setLanguageCfg function in the TOTOLINK A3300R router’s microprogramming system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Windows Deployment Services DoS

The vulnerability of Windows Deployment Services for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to perform a service failure remotely...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

GraalVM Compiler Information Disclosure

The vulnerability of the GraalVM Compiler for Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK relates to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

ABB eSOMS Code Execution

The vulnerability of the ABB eSOMS software for managing production processes is related to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Authentication DoS

The vulnerability of the Windows Authentication component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a DoS attack...

Microsoft Office Graphics Package Code Execution

The vulnerability of the Microsoft Office Graphics Package components in Microsoft Office products is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2023-3985 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 Description: The issue is related to errors in processing input data in the Oracle WebLogic Server component of Oracle Fusion Middleware. Exploitation of this issue can allow a remote...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

USN-6229-1: LibTIFF vulnerabilities

It was discovered that LibTIFF was not properly handling variables used to perform memory management operations when processing an image through tiffcrop, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

PT-2023-26300 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

Tenda FH1203 page parameter stack buffer overflow vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the page parameter of the fromAddressNat method failing to properly validate the length o...

Windows Code Execution

Vulnerabilities of Windows operating systems and Microsoft Office software are related to errors in processing input data. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code by having the user open a specially crafted Microsoft Office document...

PT-2023-4008

Name of the Vulnerable Software and Affected Versions Rockwell Automation PowerMonitor 1000 affected versions not specified Description The issue is related to stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access...

GLPI SQL Injection

The vulnerability of the GLPI system for handling requests and incidents is related to insufficient cleaning of user data on search pages. A malicious actor can trick a victim into clicking on a specially created link, allowing arbitrary HTML code and scripts to be executed in the user’s browser...

CVE-2023-36632

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed ...

Snowflake Golang Driver Code Execution

The vulnerability of the Snowflake Golang driver for working with the cloud-based data processing and storage platform involves the absence of measures to clean incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...