SmartStar Software CWS Code Issue Vulnerability

SmartStar Software CWS is a Web-based integration platform from China-based SmartStar Software. A code issue vulnerability exists in SmartStar Software CWS v10.25, which stems from the file upload feature not restricting the upload of dangerous types of files, which can be exploited by remote...

SmartStar Software CWS Security Vulnerability

SmartStar Software CWS is a Web-based integration platform from China-based SmartStar Software. A security vulnerability exists in SmartStar Software CWS version v10.25, which stems from a lack of authorization checking in the system, allowing users to access data or perform operations that they...

The vulnerability of the Libavif library for encoding and decoding .avif files allows a perpetrator to execute arbitrary code or cause a service failure. This vulnerability is present in Google Chrome browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome’s Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure through a...

Kaifa Technology WebITR Security Breach

Kaifa Technology Kaifa Technology WebITR is an online time and attendance system from China's Kaifa Technology Corporation. A security vulnerability exists in Kaifa Technology WebITR version 21023, which originates from the file upload feature not restricting the upload of dangerous types of file...

The vulnerability of the microprogramming software for Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to the possibility of using memory after it is released, allowing a intruder to cause a service failure.

The vulnerability of the microprogrammed software of Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause malfunctions during maintenance operations...

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the formIPMacBindModify function in the microprogrammed wireless Wi-Fi router software Tenda W20E is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the data modem in the microprogramming software of Qualcomm-internal chips allows a perpetrator to cause a service failure.

The vulnerability of the data modem component of Qualcomm’s embedded software is related to incorrect cleaning of the TLB buffer during message processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the formSetSysToolDDNS/formGetSysToolDDNS function in the Tenda AC23 router software allows a hacker to cause a service failure.

The vulnerability of the formSetSysToolDDNS/formGetSysToolDDNS function in the Tenda AC23 router software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the fromAddressNat function in the Tenda AC500 router software allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in Tenda AC500 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Design/Logic Flaw

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it's recommended that all users exposing Cube APIs...

CVE-2023-50709 Denial of service attack on the cube-api endpoint

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it's recommended that all users exposing Cube APIs...

CVE-2023-50709 Denial of service attack on the cube-api endpoint

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it's recommended that all users exposing Cube APIs...

Denial Of Service (DoS)

nuxt-api-party is vulnerable to Denial of Service DoS. The vulnerability could be exploited via crafting a malicious URL and setting high retry attempts, which allows an attacker to trigger a recursive error handling loop, crashing the server and potentially disrupting service for legitimate user...

The vulnerability of the web page rendering modules in WebKitGTK+ and WPE WebKit, caused by buffer overflows, allows attackers to trigger a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK+ and WPE WebKit is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

The vulnerability of the get_parentControl_list_Info() function in the Tenda AC10 router’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the getparentControllistInfo function in the Tenda AC10 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the urls parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

The vulnerability of the compare_parentcontrol_time() function in Tenda AC10 router software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the compareparentcontroltime function in Tenda AC10 router microprogramming software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the FRRouting software implementation for networking routing on Unix-like systems lies in its uncontrolled resource consumption, which allows a hacker to cause service interruptions.

The vulnerability of the FRRouting software implementation for Unix-like systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

The vulnerability of the SetFirewallCfg() function in the Tenda AC10 router’s microprogramming software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the SetFirewallCfg function in the Tenda AC10 router microprogramming system is related to the issue where the operation’s output goes beyond the buffer boundaries in memory when processing the firewallEn parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the smb2_dump_detail() function in Linux operating systems allows a hacker to disclose sensitive information or cause service interruptions.

The vulnerability of the smb2dumpdetail function in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the ACEManager component in the ALEOS operating system of Sierra Wireless’ wireless routers—MP70, RV50x, RV55, LX40, LX60 ES450, GX450—allows a hacker to cause service interruptions.

The vulnerability of the ACEManager component in the ALEOS operating system for wireless routers from Sierra Wireless—such as the MP70, RV50x, RV55, LX40, LX60 ES450, and GX450 models—is related to pre-installed credentials due to the use of the assert function or similar operators. Exploiting th...