SUSE CVE-2020-27823

A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

The vulnerability of the libndp library, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the libndp library relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending specially crafted IPv6 packets...

ROS-20240529-04

A vulnerability in the ImageIO component of the Oracle Java SE software platform and the Oracle GraalVM Virtual Machine Enterprise Edition is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a partial denial of service Vulnerability i...

The vulnerability of the ljca_new_client_device() function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ljcanewclientdevice function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the pdsc_auxbus_dev_register() function in the drivers/net/ethernet/amd/pds_core/auxbus.c file of the AMD network device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pdscauxbusdevregister function in the drivers/net/ethernet/amd/pdscore/auxbus.c file of the AMD network device driver for the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the ipv6_mc_down() function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv6mcdown function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation is related to resource competition race conditions. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the `ip6_tnl_parse_tlv_enc_lim()` function in the `net/ipv6/ip6_tunnel.c` module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6tnlparsetlvenclim function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

The vulnerability of the inet_init() function in the net/ipv4/af_inet.c module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetinit function in the net/ipv4/afinet.c module, which is part of the Linux kernel’s implementation of the IPv4 protocol, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3Imgdu driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c file of the Intel ipu3-imgu driver for the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the formexeCommand() function in Tenda i21 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in Tenda i21 router microprogramming software is related to the operation that occurs outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

PT-2024-3929 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Presentation API of Google Chrome and Microsoft Edge browsers. This...

PT-2025-7547

Name of the Vulnerable Software and Affected Versions XWiki versions prior to 15.10.11 XWiki versions prior to 16.4.1 XWiki versions prior to 16.5.0RC1 Description XWiki Platform is susceptible to a remote code execution RCE vulnerability. An unauthenticated attacker can execute arbitrary code by...

The vulnerability of the formOfflineSet (/goform/setStaOffline) function in the Tenda i21 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formOfflineSet /goform/setStaOffline function in the Tenda i21 router microprogramming software is related to buffer overflow during the processing of the GO/ssidIndex parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...

The vulnerability of the formWifiMacFilterGet function in Tenda i21 router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiMacFilterGet function in Tenda i21 router microprogramming software is related to buffer overflow in the stack when processing the index parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

Pentera's 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

Over the past two years, a shocking 51% of organizations surveyed in a leading industry report have been compromised by a cyberattack. Yes, over half. And this, in a world where enterprises deploy an average of 53 different security solutions to safeguard their digital domain. Alarming? Absolutel...

The vulnerability of the fromNatlimit function in Tenda W30E microprogrammable router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromNatlimit function in the Tenda W30E router’s microprogramming system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2024-3218 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical issue affects the formSetStaticRoute function of the /goform/setStaticRoute file, where manipulation of the staticRouteIndex argument leads to a stack-based buffer overflow. This can be...

EUVD-2024-1290

XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, when the realtime editor is installed in XWiki, it allows arbitrary remote code execution with the interaction of an admin user with programming right. More precisely, b...

PT-2024-2957 · Sap · Sap Asset Accounting

Name of the Vulnerable Software and Affected Versions: SAP Asset Accounting affected versions not specified Description: The issue is related to insufficient validation of path information provided by users, which can be exploited by a high-privileged attacker to impact the confidentiality,...

The vulnerability of the fromSetWifiGuestSetBasic function (/goform/WifiGuestSet) in the Tenda AC7 router software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromSetWifiGuestSetBasic function /goform/WifiGuestSet in the Tenda AC7 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...