DEBIAN-CVE-2023-38431

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdusize in ksmbdconnhandlerloop, leading to an out-of-bounds read...

Tenda FH1203 formSetDeviceName method stack buffer overflow vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the deviceId parameter of the formSetDeviceName method failing to properly validate the...

PT-2023-5452 · Kofax · Kofax Power Pdf Advanced

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF Advanced affected versions not specified Description: The issue is related to a heap-based buffer overflow in the parsing of PDF files, which can be exploited to execute arbitrary code on affected installations. This requires...

Fuji Electric TELLUS/TELLUS Lite Buffer Overflow Vulnerability (CNVD-2025-16532)

Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. Fuji Electric TELLUS and Fuji Electric...

Fuji Electric TELLUS 缓冲区错误漏洞

Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. Fuji Electric TELLUS and Fuji Electric...

PT-2023-4042 · Gstreamer +6 · Gstreamer +6

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. The specific flaw exists within the parsing of SRT subtitle files, resulting from the...

CVE-2023-0668

Wireshark 4.0.5 and earlier are affected by a heap-based buffer overflow in the IEEE C37.118 Synchrophasor dissector caused by failure to validate the length of attacker‑crafted packets. This can lead to process‑level code execution. Public advisories and CVE coverage (CVE-2023-0668) reference fi...

CVE-2023-0921

A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage...

CVE-2023-0921

A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage...

CVE-2023-0921

A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage...

Input validation

A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage...

CVE-2023-0921

CVE-2023-0921 describes a vulnerability in GitLab CE/EE where a lack of length validation in GraphQL allows an authenticated attacker to create a very large Issue description; when this description is repeatedly requested, it can cause high CPU usage. Affected versions are GitLab CE/EE: 8.3–15.10...

freerdp: missing length validation in urbdrc channel

An out-of-bound read vulnerability was discovered in FreeRDP due to improper input length validation in client/datatransfer.c in the urbdrc channel. A malicious server can trigger an out-of-bounds read by tricking a FreeRDP based client to read out-of-bound data and send it back to the server...

ALSA-2023:2851 Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: clients using /parallel command line switch might read...

Oracle Linux 9 : freerdp (ELSA-2023-2326)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2326 advisory. - CVE-2022-39282: Fix length checks in parallel driver 2136152 - CVE-2022-39283: Add missing length check in video channel 2136154 - CVE-2022-39316,...

RHEL 9 : freerdp (RHSA-2023:2326)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2326 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

kernel: cifs: potential buffer overflow in handling symlinks

A buffer overflow vulnerability has been identified in the Linux kernel's Common Internet File System CIFS module, specifically within the parsemfsymlink function. This flaw is caused by insufficient input validation on the linklen value, which dictates the length of a symbolic link. An attacker...

freerdp: missing input length validation in `drive` channel

An out-of-bounds read vulnerability was discovered in FreeRDP due to improper input length validation in the drive channel. A malicious server can trick a FreeRDP based client to read out-of-bound data and send it back to the server...

freerdp: missing length validation in urbdrc channel

An out-of-bound read vulnerability was discovered in FreeRDP due to improper input length validation in client/datatransfer.c in the urbdrc channel. A malicious server can trigger an out-of-bounds read by tricking a FreeRDP based client to read out-of-bound data and send it back to the server...

Improper Input Validation

@openzeppelin/contracts is vulnerable to Improper Input Validation. The vulnerability exists because the GovernorCompatibilityBravo.sol does not properly validate the length of signatures and calldatas parameters in all proposals that are passed through the governance, which allows an attacker to...