The vulnerability of the extractimagesection function in the libtiff library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the extractimagesection function in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

The vulnerability of the tiffclose() function in the libtiff library, related to improper handling of hard links, allows a hacker to cause a service failure.

The vulnerability of the tiffclose function in the libtiff library is related to improper handling of hard links. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system allows attackers to trigger service interruptions or perform remote code execution within the context of the current process.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization lifecycle management system lies in the ability to read data beyond the buffer limit when analyzing specially created XT files. Exploiting this vulnerability can allow attackers to trigger service failure...

The vulnerability of the Apache Tomcat application server, related to a single shift error, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Improper Input Validation

trafficserver is vulnerable to Improper Input Validation. This vulnerability allows an attacker to bypass security restrictions by sending a specially crafted HTTP request to gain unauthorized access to a vulnerable Apache Traffic Server instance, which could allow them to steal data, modify...

CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote...

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39239

The CVE-2023-39239 entry concerns an authenticated/remote (sources vary on privilege) format string vulnerability in the General function API (apply.cgi) of ASUS RT-AX56U V2. The flaw arises from lack of input validation for a specific value in apply.cgi, enabling remote code execution or disrupt...

The vulnerability of the TIFFReadDirectory function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the TIFFReadDirectory function in the LibTIFF library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the formSetDeviceName() function in the Tenda AC8 router’s microprogramming software allows a hacker to execute arbitrary code, increase their privileges, or cause service failures.

The vulnerability of the formSetDeviceName function in the Tenda AC8 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, gain elevated privileges, or cause...

Vulnerability of the gdi_CreateSurface() function in RDP clients of FreeRDP, allowing attackers to cause service interruptions

The vulnerability of the gdiCreateSurface function in the RDP client FreeRDP is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Vulnerability of the progressive_decompress() function in the RDP client FreeRDP, allowing a hacker to trigger a service failure

The vulnerability of the progressivedecompress function in the RDP client FreeRDP is related to the occurrence of operations outside the buffer in memory when processing nXSrc and nYSrc. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the GetParentControlInfo() function in Tenda AC9 and Tenda AC5 router microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the GetParentControlInfo function in Tenda AC9 and Tenda AC5 routers is related to the issue where an operation exceeds the buffer boundaries in memory when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause...

PT-2023-26259 · Ivanti · Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche Manager versions prior to 6.4.1 Description: A security vulnerability within Ivanti Avalanche Manager may allow an unauthenticated attacker to create a buffer overflow, potentially leading to service disruption or arbitrary...

The vulnerability of the /goform/SetIpMacBind component in the Tenda AC10 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/SetIpMacBind component in the Tenda AC10 router software lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the BigDecimal component in the Apache Johnzon JSON file processing software allows a attacker to cause a service failure.

The vulnerability of the BigDecimal component in the Apache Johnzon JSON processing software lies in the shortcomings of the deserialization mechanism when processing JSON files. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the /goform/SetIpMacBind component in the Tenda AC8 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/SetIpMacBind component in Tenda AC8 software lies in the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...