CVE-2023-22915

A buffer overflow vulnerability in the “fbwififorward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50W firmware versions 4.30 through 5.35, USG20W-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could...

The vulnerability of Microsoft Defender operating systems for Windows, which allows a hacker to trigger a service failure.

The vulnerability of Microsoft Defender operating systems on Windows is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted data...

NVIDIA DGX-1 路径遍历漏洞

NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX-1 Servers that originates from an attacker with appropriate privileges who can upload and download arbitrary files under certain circumstances, which...

CVE-2023-21978

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: GUI. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object...

CVE-2023-21925

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

The vulnerability of Siemens SCALANCE X industrial switches’ web server allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Siemens SCALANCE X industrial switches’ web servers is related to incorrect processing of POST requests sent to the web server. Exploiting this vulnerability allows a malicious actor to trigger service failures or execute arbitrary code...

The vulnerability in the web administration interface of the Local Status Page (LSP) of Cisco Meraki software for network devices allows a hacker to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the administration web interface for Local Status Pages LSP in Cisco Meraki network devices stems from the low entropy of default account credentials. Exploiting this vulnerability could allow an attacker to cause service interruptions or gain unauthorized access to protected...

CVE-2023-20030

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive information, conduct a server-side request forgery SSRF attack through an affected device, or negatively impact the responsiveness of the...

CVE-2023-0977

A heap-based overflow vulnerability in Trellix Agent Windows and Linux version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable...

GNU Binutils 缓冲区错误漏洞

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from a buffer overflow vulnerability that originates from ...

The vulnerability of the DHCP implementation in the software-based quadcopter DJI Spark protocol allows a perpetrator to cause service failure.

The vulnerability of the DHCP implementation in DJI Spark quadrocopters’ software lies in the exhaustion of the IP address pool due to changes in the security-critical protection mechanism. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafte...

PT-2023-2484 · Moxa · Miineport E1

Name of the Vulnerable Software and Affected Versions: Moxa MiiNePort E1 affected versions not specified Description: The issue is related to insufficient access control, allowing an unauthenticated remote user to exploit the vulnerability and perform arbitrary system operations or disrupt servic...

The vulnerability of the inet_http_server component in the Supervisor process control system allows a perpetrator to access confidential data and also cause service interruptions.

The vulnerability of the inethttpserver component in the Supervisor process control system is related to a file logging error. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service interruptions...

The vulnerability in the vector graphic editor Inkscape, related to writing outside the buffer boundaries, allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the vector graphic editor Inkscape is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the sps.cc component in the h.265 Libde265 video codec implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sps.cc component in the h.265 video codec implementation by Libde265 is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the dataWindowForTile() function in the IlmImf/ImfTiledMisc.cpp component of the OpenEXR image storage software, which supports a wide dynamic range of brightness values. This vulnerability allows attackers to compromise data integrity and cause service interruptions.

The vulnerability of the dataWindowForTile function in the IlmImf/ImfTiledMisc.cpp component of the OpenEXR image storage software, which supports a wide dynamic range of brightness values, is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data...

The vulnerability of the RDMA hardware emulation device by QEMU allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RDMA hardware emulation device implemented by QEMU is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability in the web interface of the microprogramming software for TP-Link Archer C50 allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the intrapred.h function of the libde265 video codec allows a hacker to cause a service failure.

The vulnerability of the intrapred.h function in the libde265 video codec is related to an error in decoding files using dec256. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the print_mac function in the Dnsmasq DNS server allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the printmac function in the Dnsmasq DNS server is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...