752 matches found
Tenda M3 缓冲区错误漏洞
Tenda M3 is an access controller from Tenda, China. Tenda M3 v1.0.0.12 is vulnerable to a stack overflow vulnerability that stems from the formGetPassengerAnalyseData function not checking the length of the input data. An attacker could exploit this vulnerability to cause a denial of service atta...
TOTOLINK T6 缓冲区错误漏洞
TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.TOTOLINK T6 version V4.1.9cu.5179B20201015 is vulnerable to a stack overflow vulnerability, which originates from the desc, week, sTime, eTime parameters in the FUN004133c4 function for The input data is not checked f...
golang: crypto/elliptic: panic caused by oversized scalar
An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256.ScalarMult or P256.ScalarBaseMult to panic, leading to a loss of availability...
MediaWiki Denial of Service Vulnerability (CNVD-2022-60675)
MediaWiki is a set of web-based wiki engines from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki version 1.38.1 and earlier versions have a denial of service vulnerability, which stems from the fac...
MediaWiki 安全漏洞
MediaWiki is a set of web-based wiki engines from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki version 1.38.1 and earlier versions have a denial of service vulnerability, which stems from the fac...
CVE-2021-45918
NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...
PT-2022-12468 · Unknown · Nhi'S Health Insurance Web Service
Name of the Vulnerable Software and Affected Versions: NHI's health insurance web service component affected versions not specified Description: The issue is related to insufficient validation for input string length in the health insurance web service component, which can lead to a heap-based...
Ubuntu: Security Advisory (USN-5360-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5360-1 tomcat9 vulnerabilities
It was discovered that Tomcat incorrectly performed input verification. A remote attacker could possibly use this issue to intercept sensitive information. CVE-2020-13943, CVE-2020-17527, CVE-2021-25122, CVE-2021-30640 It was discovered that Tomcat did not properly deserialize untrusted data. An...
NETGEAR R6700v3 授权问题漏洞
NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from an authorization issue vulnerability that stems from not properly validating the length of user-supplied data before copying it into a buffer. An attacker could exploit the...
PT-2022-13028 · Netatalk +3 · Netatalk +3
Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within th...
brotli: buffer overflow when input chunk is larger than 2GiB
A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a "one-shot" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB...
brotli: buffer overflow when input chunk is larger than 2GiB
A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a "one-shot" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB...
brotli: buffer overflow when input chunk is larger than 2GiB
A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a "one-shot" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB...
brotli: buffer overflow when input chunk is larger than 2GiB
A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a "one-shot" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB...
Autodesk AutoCAD 缓冲区错误漏洞
Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. A buffer error vulnerability exists in Autodesk AutoCAD that stems from a lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer...
DEBIAN-CVE-2022-26125
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isistlvs.c...
DEBIAN-CVE-2022-26127
A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...