D-Link DIR-605L formSetWanPPTP Function Buffer Overflow Vulnerability

The D-Link DIR-605L is the first cloud router from AUO, aimed at home and small office network environments. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates from the webpage parameter of the formSetWanPPTP function in the /goform/formSetWanPPTP page that fails to...

AUO DIR-605L formDeviceReboot Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the nextpage parameter of the formDeviceReboot function in the /goform/formDeviceReboot page that fails to correctly validate the length and size of th...

D-Link DIR-605L formAdvanceSetup Function Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L 2.13B01 suffers from a buffer overflow vulnerability, which originates from the webpage parameter of the formAdvanceSetup function in the /goform/formAdvanceSetup page that fails to correctly validate the length...

AUO DIR-605L formSetWanPPPoE Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the webpage parameter of the formSetWanPPPoE function in the /goform/formSetWanPPPoE page that fails to correctly validate the length and size of the...

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-40922)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that originates from allowing out-of-bounds writes to memory. An attacker could exploit the vulnerability to execute arbitrary code in t...

EulerOS 2.0 SP11 : dnsmasq (EulerOS-SA-2024-2550)

According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery.CVE-2023-49441 Tenable has extracted the preceding description block directly from...

PT-2024-7148 · D Link · D-Link Dir-820L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-820L version 1.05B03 Description: The issue is a stack overflow vulnerability located in the sub 451208 function. This vulnerability can be exploited by a remote attacker to impact the confidentiality, integrity, and availability o...

PT-2024-7003 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06 Description: A critical issue has been found in the function formSetWizardSelectMode of the file "/goform/formSetWizardSelectMode". The manipulation of the argument curTime leads to a buffer overflow. It is possib...

SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2024:3524-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3524-1 advisory. This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by...

The vulnerability in theutils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of theutils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise i...

The vulnerability in the component opencv/modules/imgcodecs/src/grfmt_pxm.cpp of the OpenCV library, which is part of the Open Source Computer Vision Library (OpenCV), allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the opencv/modules/imgcodecs/src/grfmtpxm.cpp file of the Computer Vision Library, which is part of the Open Source Computer Vision Library OpenCV, involves a numerical overflow issue. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

The vulnerability in the `opencv/modules/imgcodecs/src/grfmt_pxm.cpp` file of the Computer Vision Library, which is part of the Open Source Computer Vision Library (OpenCV), allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the opencv/modules/imgcodecs/src/grfmtpxm.cpp file of the Computer Vision Library, which is part of the Open Source Computer Vision Library OpenCV, involves a numerical overflow issue. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

OESA-2024-2186 uboot-tools security update

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound t...

kernel: ACPI: LPIT: Avoid u32 multiplication overflow

In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow The Linux kernel CVE team has assigned CVE-2023-52683 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051751-CVE-2023-52683-f280@gregkh/T...

DIR-X4860 Buffer Overflow Vulnerability at AUO Electronic Devices (Shanghai) Co.

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO Electronic Devices Shanghai Co. The DIR-X4860 suffers from a buffer overflow vulnerability that stems from the inclusion of a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on...

The vulnerability of the communication protocol between the client and the composer, Wayland, is related to a potential overflow of data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of the Wayland communication protocol between the client and the composer is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

DrayTek Vigor 3910 Buffer Overflow Vulnerability (CNVD-2024-39946)

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the CGIbyFieldName parameter of the chglog.cgi page that fails to correctly validate the length of the input...

TOTOLINK AC1200 T8 UploadCustomModule function buffer overflow vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 UploadCustomModule function. The vulnerability stems from the failure of the File parameter of the UploadCustomModule function to...

TOTOLINK AC1200 T8 setWiFiAclRules function buffer overflow vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 setWiFiAclRules function. The vulnerability stems from the desc parameter of the setWiFiAclRules function failing to correctly validat...

DrayTek Vigor 3910 Buffer Overflow Vulnerability (CNVD-2024-39948)

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the sPubKey parameter on the dialin.cgi page that fails to properly validate the length of the input data, and...