The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CmpTraceMgr component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code...

CVE-2023-3766 Invalid Slice Split Results in Server Panic

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients and enables an attacker with knowledge of this vulnerability to craft and...

The vulnerability of the SAP Solution Manager (Diagnostics agent) platform, related to insufficient validation of incoming requests, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the SAP Solution Manager Diagnostics agent platform lies in insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures by sending specially crafted HTTP requests...

The vulnerability of the WASM JIT component in the Firefox browser, including Firefox Firefox ESR, allows a hacker to trigger a service failure.

The vulnerability of the WASM JIT component in Firefox browsers, including Firefox ESR, is related to improper resource cleanup or release mechanisms. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the overlayfs file system in the Ubuntu operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the overlayfs file system in the Linux kernel of the Ubuntu operating system is related to incorrect authorization. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions...

Vulnerability of the Server component: The Replication function of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Replication component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerabilities of QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and QVR Pro video management systems are related to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerabilities of the QTS, QuTS hero, QuTScloud operating systems, QNAP network storage devices, and the QVR Pro video surveillance system are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to an error in the handling of freed memory in browsers with interleaved paging. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromDhcpListClient function in the Tenda AC6 router’s microprogramming system is caused by a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...

CVE-2023-3486

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected...

PT-2023-25037 · Papercut · Papercut Ng

Name of the Vulnerable Software and Affected Versions: PaperCut NG versions 22.0.12 and prior Description: An authentication bypass exists that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and...

PaperCut NG 代码问题漏洞

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. PaperCut NG suffers from a security vulnerability that originates from an attacker being able to upload arbitrary files to the file storage of the PaperCut NG host via authentication bypass. This could lea...

The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.

The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...

OpenJDK: ZIP file parsing infinite loop (8302483)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

CVE-2023-35087 ASUS RT-AX56U V2 & RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

Ivanti AntiVirus 缓冲区错误漏洞

Ivanti AntiVirus is an antivirus security software from Ivanti, USA. A security vulnerability exists in Ivanti AntiVirus versions prior to 7.9.1.285, which stems from an out-of-bounds write vulnerability that can be exploited by an unauthenticated, remote attacker to conduct remote arbitrary code...

OpenJDK: ZIP file parsing infinite loop (8302483)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM...