The vulnerability of the close() function in the iffoutput component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the close function in the iffoutput image processing library in OpenImageIO is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the utfc_ptr2len function in the mbyte.c text editor Vim allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the utfcptr2len function in the mbyte.c text editor Vim is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the vp3_decode_frame function in the libavcodec/vp3.c component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the vp3decodeframe function in the libavcodec/vp3.c component of the FFmpeg multimedia library is related to the lack of checking for the return value of the avmalloc function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the OpenImageIO image processing library’s output component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenImageIO image processing library’s output component relates to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to write beyond the buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerabilities of web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to buffer overflow attacks. Exploiting these vulnerabilities can allow attackers to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the ksmbd module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ksmbd module in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the CmpTraceMgr component in the Codesys industrial automation software suite allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in the Codesys industrial automation software suite relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger service failures or execute arbitrary code...

The vulnerability of the formSetSpeedWan() function in Tenda’s microprogrammed router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetSpeedWan function in the Tenda router’s microprogramming software stems from the operation that goes beyond the buffer in memory when processing the speeddir parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause servic...

The vulnerability of the SAP Message Server, a software integration platform of SAP NetWeaver, allows attackers to gain read, modify, or delete access to data, or to cause service interruptions.

The vulnerability of the SAP Message Server, a software integration platform of SAP NetWeaver, is related to deficiencies in the authentication process when processing the Access Control List ACL. Exploiting this vulnerability allows an attacker to gain read, modify, or delete access to data, or ...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit browsers of the Safari browser allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit browsers of the Safari browser is related to the issue of data being written beyond the buffer boundaries in memory when processing web content. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the formSetQosBand() function in Tenda router software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetQosBand function in Tenda router’s microprogramming software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

Design/Logic Flaw

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

CVE-2023-32560 affects Ivanti Avalanche/ Wavelink Avalanche Manager prior to v6.4.1, where processing certain item data types can trigger a buffer overflow on the stack, enabling arbitrary code execution with SYSTEM privileges. Public materials (Metasploit exploit module, packetstorm/Nessus entri...

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.1.207, which stems from a sensitive data...

The vulnerability of the addWifiMacFilter() function in Tenda router software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the addWifiMacFilter function in Tenda router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the deviceId parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability of Google Chrome’s WebGL component allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of Google Chrome’s WebGL component is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by loading a specially created web page...