2267 matches found
npm IP Package Code Issue Vulnerability
npm IP Package is an IP address utility for Node.js from npm, Inc. A code issue vulnerability exists in npm IP Package v.1.1.8 and earlier versions, which stems from a vulnerability that allows an attacker to execute arbitrary code and obtain sensitive information via the isPublic function...
SUSE CVE-2023-52340
The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c maxsize threshold that can be consumed easily, e.g., leading to a denial of service network is unreachable errors when IPv6 packets are sent in a loop via a raw socket...
The vulnerability of the setDiagnosisCfg() function in the cstecgi.cgi script of the Totolink N200RE router’s microprogramming system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the setDiagnosisCfg function in the cstecgi.cgi script of the Totolink N200RE router’s microprogramming system is related to the issue of the operation exceeding the buffer boundaries in memory when processing the ip parameter. Exploiting this vulnerability could allow an...
CVE-2024-0920
A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /adminping.htm of the component POST Request Handler. The manipulation of the argument ipv4ping/ipv6ping leads to command injection. The attack can be...
kernel: NULL pointer dereference in rawv6_push_pending_frames
A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...
The vulnerability of the IPv6 Options Header Handler component in the Tianocore EDK2 library, which allows a hacker to cause a service failure.
The vulnerability of the IPv6 Options Header Handler component in the Tianocore EDK2 library is related to buffer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...
PT-2024-19812 · Tuta · Tuta
Name of the Vulnerable Software and Affected Versions: Tuta versions prior to 119.10 Description: The issue concerns the loading of external content in emails. In the default setting, external resources should not be loaded without user confirmation. However, certain embedded images can be loaded...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to deficiencies in the access control mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...
SUSE CVE-2023-45229
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...
SUSE CVE-2023-45232
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...
SUSE CVE-2023-45233
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...
AZL-38842 CVE-2023-45233 affecting package edk2 for versions less than 20240223gitedc6681206c1-1
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...
UBUNTU-CVE-2023-45233
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availability...
The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway, which stems from insufficient validation of input data, allows a intruder to alter the IP configuration and trigger a service failure.
The vulnerability of the SIMATIC CN 4100 communication gateway’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to alter the IP configuration and cause service failures...
CVE-2023-51961
Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv...
CVE-2023-41603
D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6...
Tenda AX1803 安全漏洞
Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1. The vulnerability stems from the adv.iptv.stbpvid parameter of the getIptvInfo method failing to correctly validate the length of the input data, which can be...
USN-6548-4 linux-gkeop vulnerabilities
It was discovered that Spectre-BHB mitigations were missing for Ampere processors. A local attacker could potentially use this to expose sensitive information. CVE-2023-3006 It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors i...
CVE-2024-21313
Windows TCP/IP Information Disclosure Vulnerability...
CVE-2023-49252
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.7. The affected application allows IP configuration change without authentication to the device. This could allow an attacker to cause denial of service condition...