15241 matches found
DEBIAN-CVE-2023-25076
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...
Buffer overflow
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...
CVE-2023-25076
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...
The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U, related to deficiencies in access control, allows a intruder to gain control and manage the operation of the controller.
The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain control and manage the controller’s operations by sending specially crafted packets via the XGT protocol...
SNIProxy 安全漏洞
SNIProxy proxies incoming HTTP and TLS connections based on the hostname contained in the initial request of the TCP session. This allows HTTPS name-based virtual hosts to detach the back-end server without the need to install a private key on the proxy machine. A security vulnerability exists in...
WAGO I/O-CHECK Buffer Copy Without Checking Size of Input (CVE-2019-5082)
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.0713, WAGO PFC200 Firmware version 03.00.3912, and WAGO PFC100 Firmware version 03.00.3912. A specially crafted set of packets can cause a heap buffer...
Wago PFC100/PFC200 OS Command Injection (CVE-2020-12522)
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...
Advisory ROSA-SA-2023-2136
Software: java-11-openjdk 11.0.18.0.10-1 OS: rosa-server79 packageevrstring: 11.0.18.0.10-1 CVE-ID: CVE-2022-21365 BDU-ID: 2022-02011 CVE-Crit: MEDIUM CVE-DESC: A vulnerability in the ImageIO component of the Oracle Java SE software platform and Oracle GraalVM Enterprise Edition virtual machine i...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module, related to insufficient testing of exceptional states, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...
The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the communication module, Tricon Communications Module, relates to the issue of receiving distorted TriStation packets. This vulnerability allows a perpetrator to trigger a service failure.
The vulnerability of the microprogramming software of Triconex Model 3009/3009X MP processors and the communication module Tricon Communications Module is related to the execution of distorted TriStation packets. Exploiting this vulnerability can allow an intruder to cause service failures...
Design/Logic Flaw
DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the device's internal Wi-Fi network e.g., by guessing the password. Then, the attacker would need to send...
CVE-2023-1133
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow an unauthenticated attacker to remote...
CVE-2023-1133
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow an unauthenticated attacker to remote...
CVE-2023-24094
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
CVE-2023-24094
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
MikroTik RouterOS 缓冲区错误漏洞
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in PCs to enable them to provide router functionality. A security vulnerability exists in MikroTik RouterOS version v6.40.5, which stems from a problem in the bridge2...