The vulnerability of the item_subselect.cc component of the MariaDB database management system allows a hacker to cause service failures.

The vulnerability of the itemsubselect.cc component of the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the my_wildcmp_8bit_impl component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the mywildcmp8bitimpl component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package allows a hacker to cause a service failure or exert other effects.

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

The vulnerability of the Traffic Analyzer – Statistical function in the microprogramming software for Wi-Fi routers from ASUS’ RT-AC86U allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the Traffic Analyzer – Statistical function in the microprogramming software for Wi-Fi routers from ASUS’ RT-AC86U relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote...

The vulnerability of the JSProxy web server on the RouterOS operating system of MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the JSProxy web server on the RouterOS operating system of MikroTik devices relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted HTTP reques...

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library allows a perpetrator to cause service interruptions.

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pngimage.cpp component in the Exiv2 metadata management library, which involves writing beyond buffer boundaries in memory, allows a attacker to cause a service failure.

The vulnerability of the pngimage.cpp component in the Exiv2 media metadata management library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tiffcrop utility in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop tool exists due to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to cause service failures...

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3516) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3516 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the WP6ContentListener::defineTable() function in the libwpd library allows a attacker to cause a service failure.

The vulnerability of the WP6ContentListener::defineTable function in the wpd document processing library libwpd is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failure...

The vulnerability of the extractimagesection function in the libtiff library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the extractimagesection function in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

The vulnerability of the tiffclose() function in the libtiff library, related to improper handling of hard links, allows a hacker to cause a service failure.

The vulnerability of the tiffclose function in the libtiff library is related to improper handling of hard links. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of the XML.toJSONObject component in the file and network operations library hutool-json allows a attacker to cause a service failure.

The vulnerability of the XML.toJSONObject component in the library for file processing and network operations in hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Parasolid’s 3D geometric modeling tool and Teamcenter Visualization’s product lifecycle management system allows attackers to trigger service interruptions or perform remote code execution within the context of the current process.

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization lifecycle management system lies in the ability to read data beyond the buffer limit when analyzing specially created XT files. Exploiting this vulnerability can allow attackers to trigger service failure...

The vulnerability of the Apache Tomcat application server, related to a single shift error, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Improper Input Validation

trafficserver is vulnerable to Improper Input Validation. This vulnerability allows an attacker to bypass security restrictions by sending a specially crafted HTTP request to gain unauthorized access to a vulnerable Apache Traffic Server instance, which could allow them to steal data, modify...

CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote...

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39239

The CVE-2023-39239 entry concerns an authenticated/remote (sources vary on privilege) format string vulnerability in the General function API (apply.cgi) of ASUS RT-AX56U V2. The flaw arises from lack of input validation for a specific value in apply.cgi, enabling remote code execution or disrupt...