7173 matches found
CVE-2024-57376
CVE-2024-57376 affects D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, and DSR-1000N with firmware versions 3.13–3.17B901C. The root cause is a buffer overflow in the CGI logout handling path triggered via extCpResult passed to captivePortalLib.duaLogoutInfoGet, using strcpy on user input,...
CVE-2024-57376
Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution...
RHEL 8 : keepalived (RHSA-2025:0743)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0743 advisory. The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the...
ALSA-2025:0743 Moderate: keepalived security update
The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server IPVS kernel module providing layer-4 transport layer load balancing. Keepalived implements a set of checke...
Moderate: keepalived security update
The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server IPVS kernel module providing layer-4 transport layer load balancing. Keepalived implements a set of checke...
CVE-2024-39750
CVE-2024-39750 affects IBM Analytics Content Hub 2.0. The vulnerability is a buffer overflow caused by improper return length checking, which could allow a remote authenticated attacker to overflow a buffer and execute arbitrary code or crash the server. Remediation: upgrade IBM Analytics Content...
CVE-2024-50698
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content...
CVE-2022-47090
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c, check needed for numexptilecolumns...
CVE-2024-55192
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIOv310::farmhash::inlined::Fetch64char const...
Buffer overflow vulnerability in the schedEndTime parameter of the Tenda AC8 setSchedWifi function
Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability, which originates from the failure of the schedStartTime parameter of the setSchedWifi function in file /goform/openSchedWifi to correctly validate the length of the input data,...
Buffer overflow vulnerability in the schedEndTime parameter of the Tenda AC8 setSchedWifi function
Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability that originates from the failure of the schedEndTime parameter of the setSchedWifi function in the file /goform/openSchedWifi to correctly validate the length size of the input dat...
CVE-2023-36998
The NextEPC MME = 1.0.1 fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the...
CVE-2023-36998
The CVE-2023-36998 entry concerns NextEPC MME
ROS-20250122-02
A vulnerability in the USB component of the Linux kernel is related to incorrect input validation in the usbparseendpoint function in drivers/usb/core/config.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the cachefiles component of th...
CVE-2024-57545
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field hiddendhcpnum is copied to the stack without length verification...
CVE-2024-57543
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field dhcpstartip is copied to the stack without length verification...
CVE-2024-57538
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field anonymousprotectstatus is copied to the stack without length verification...
CVE-2024-57537
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field page is copied to the stack without length verification...