CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

Design/Logic Flaw

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

CVE-2023-32560 affects Ivanti Avalanche/ Wavelink Avalanche Manager prior to v6.4.1, where processing certain item data types can trigger a buffer overflow on the stack, enabling arbitrary code execution with SYSTEM privileges. Public materials (Metasploit exploit module, packetstorm/Nessus entri...

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.1.207, which stems from a sensitive data...

The vulnerability of the addWifiMacFilter() function in Tenda router software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the addWifiMacFilter function in Tenda router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the deviceId parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

The vulnerability of Google Chrome’s WebGL component allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of Google Chrome’s WebGL component is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by loading a specially created web page...

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

CVE-2023-3766 Invalid Slice Split Results in Server Panic

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients and enables an attacker with knowledge of this vulnerability to craft and...

The vulnerability of the SAP Solution Manager (Diagnostics agent) platform, related to insufficient validation of incoming requests, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the SAP Solution Manager Diagnostics agent platform lies in insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures by sending specially crafted HTTP requests...

The vulnerability of the WASM JIT component in the Firefox browser, including Firefox Firefox ESR, allows a hacker to trigger a service failure.

The vulnerability of the WASM JIT component in Firefox browsers, including Firefox ESR, is related to improper resource cleanup or release mechanisms. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the overlayfs file system in the Ubuntu operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the overlayfs file system in the Linux kernel of the Ubuntu operating system is related to incorrect authorization. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions...

Vulnerability of the Server component: The Replication function of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Replication component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerabilities of QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and QVR Pro video management systems are related to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerabilities of the QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and the QVR Pro video surveillance system are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to an error in the handling of freed memory in browsers with interleaved paging. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router’s microprogramming system is caused by a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...