CVE-2022-2714

Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0...

CVE-2024-53856: Improper Handling of Length Parameter Inconsistency

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1...

kernel: of: module: prevent NULL pointer dereference in vsnprintf()

A null pointer dereference vulnerability was found in vsnprintf when str and len parameters are passed to vsnprintf, which only allows passing a NULL ptr when the length is 0. This issue can result in a crash and damage to availability...

Tenda多款产品 代码问题漏洞

Tenda AC7 and others are products of Tenda, a Chinese company.Tenda AC7 is a wireless router.Tenda AC9 is a wireless router.Tenda AC10 is a wireless router. A code issue exists in a number of Tenda products where the vulnerability stems from a null pointer dereference vulnerability in the...

The vulnerability of the get_supported_language_variant() function on the Django web application’s software platform, related to errors in processing length parameters, allows attackers to trigger a denial-of-service attack.

The vulnerability of the getsupportedlanguagevariant function in the Django web application framework is related to errors in processing parameter lengths. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vivotek CC8160 安全漏洞

Vivotek CC8160 is a 2MP highly striped network camera from VIVOTEK Communications Vivotek, China. A security vulnerability exists in the Vivotek CC8160 VVTK-0100d version release, which originates from the parameter Content-Length of the component httpd that causes a stack-based buffer overflow...

CVE-2024-20416: Improper Handling of Length Parameter Inconsistency

A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient boundary checks when processing specific HTTP requests. An attacker...

CVE-2024-39614: Improper Handling of Length Parameter Inconsistency

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. getsupportedlanguagevariant was subject to a potential denial-of-service attack when used with very long strings containing specific characters...

CVE-2024-37989: Improper Handling of Length Parameter Inconsistency

Secure Boot Security Feature Bypass Vulnerability...

CVE-2024-38010: Improper Handling of Length Parameter Inconsistency

Secure Boot Security Feature Bypass Vulnerability...

CVE-2024-38011: Improper Handling of Length Parameter Inconsistency

Secure Boot Security Feature Bypass Vulnerability...

Improper Handling of Length Parameter Inconsistency

Overview Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency in the Pdfinfo component. An attacker can cause a crash by passing in malicious input and using the dtests parameter. Remediation Upgrade poppler to version 25.11.0 or higher. Referenc...

CVE-2024-35313: Improper Handling of Length Parameter Inconsistency

In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 with full vanguards, aka TROVE-2024-004...

PT-2024-25938

Name of the Vulnerable Software and Affected Versions Faucet SDN Ryu version 4.34 Description The issue allows attackers to cause a denial of service infinite loop via b.length=0 in OFPMultipartReply in parser.py. Recommendations For version 4.34, consider disabling the OFPMultipartReply function...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Improper Handling of Length Parameter Inconsistency (CVE-2023-5393)

Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and...

Vyper 安全漏洞

Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper 0.3.10 and earlier versions, which stems from when the buffer parameters are msg.data, self.code, .code, start, length...

Security Advisory - Improper Handling of Length Parameter Inconsistency in a Huawei PC Product

A Huawei PC product is vulnerable to improper handling of length parameter inconsistency. Successful exploitation of this vulnerability can compromise the data structure stored at the beginning of SMRAM and may cause code execution in SMM.Vulnerability ID:HWPSIRT-2023-91490 This vulnerability has...

CVE-2024-20685: Improper Handling of Length Parameter Inconsistency

Azure Private 5G Core Denial of Service Vulnerability...

CVE-2024-29064: Improper Handling of Length Parameter Inconsistency

Windows Hyper-V Denial of Service Vulnerability...

CVE-2024-24976: Improper Handling of Length Parameter Inconsistency

A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can cause the running program to stop. An attacker can send a sequence of requests to trigge...