5271 matches found
The vulnerability of the web interface of DrayTek Vigor microprogramming software-enabled routers allows a hacker to modify settings or cause service failures.
The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the writing and reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to modify settings remotely or cause service failures...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...
The vulnerability of the VPN Secure Sockets Layer (SSL) function of the microprogramming network interface devices of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.
The vulnerability of the VPN Secure Sockets Layer SSL function in microprogramming network interfaces of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability could...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...
CVE-2024-33700
The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption...
CVE-2024-33700
CVE-2024-33700 concerns the LevelOne WBR-6012 router, firmware R0.40e6, where a vulnerability in the FTP handling causes denial of service via a series of malformed, unauthenticated FTP commands. The root cause is improper input validation within the FTP functionality, allowing crafted FTP inputs...
The vulnerability in the configuration of the traceoptions feature of the BGP protocol in the routing protocol rpd of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause a service failure.
The vulnerability of the traceoptions configuration in the BGP protocol of the routing protocol rpd for Juniper Networks’ Junos OS and Junos OS Evolved is related to improper verification of consistency in input data. Exploiting this vulnerability allows a malicious actor to cause service...
The vulnerability of the BPF_CALL_1() function in the Linux operating system’s kernel component allows a hacker to trigger a service failure.
The vulnerability of the BPFCALL1 function in the kernel/bpf/helpers.c module of the Linux BPF component is related to incorrect serialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
LevelOne WBR-6012 FTP improper input validation vulnerability
Talos Vulnerability Report TALOS-2024-1998 LevelOne WBR-6012 FTP improper input validation vulnerability October 30, 2024 CVE Number CVE-2024-33700 SUMMARY The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers...
CVE-2024-8309
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...
The vulnerability of the nvmet-fc component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the nvmet-fc component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ntfs3 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ntfs3 component in the Linux operating system’s kernel is related to errors in reading data beyond the boundaries of the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
PYSEC-2024-299
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
PYSEC-2024-299
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455 Reachable Assertion in µD3TN
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455
CVE-2024-10455 affects µD3TN v0.14.0’s BPv7 parser. A reachable assertion can be triggered by a malformed Extension Block, potentially disrupting service. Reported across multiple feeds (Red Hat, NVD, CNNVD, PT-Security, etc.). Mitigation notes from PT-Security suggest disabling the BPv7 parser u...
The vulnerability of the ODXSW_DLL.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to disclose protected information, execute arbitrary code, or cause service interruptions.
The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD modeling, design, and drawing software, relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information, execute arbitrary code, or cause a service...
Vulnerability of the Server: X Plugin component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the Oracle MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
The vulnerability of the formSetWAN_Wizard51() and formSetWAN_Wizard52() functions in the D-Link DIR-605L router software allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetWANWizard51 and formSetWANWizard52 functions in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...