25640 matches found
CVE-2024-41592
DrayTek Vigor3910 devices running firmware version 4.3.2.6 and earlier are susceptible to a stack-based buffer overflow within the GetCGI() function. This flaw occurs because the system mishandles long key-value pairs and extraneous ampersand characters when processing query string parameters. A ...
CVE-2024-41586
The DrayTek Vigor310 router (firmware versions through 4.3.2.6 ) is susceptible to a stack-based Buffer Overflow vulnerability in the /cgi-bin/ipfedr.cgi component. A remote attacker can exploit this by sending a specially crafted HTTP request containing a long query string , potentially resultin...
CVE-2024-41592
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs...
DrayTek Vigor 3910 security vulnerabilities
The DrayTek Vigor 3910 is a high-performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version 4.3.2.6 and prior versions, which is caused by a stack-based overflow when processing query string parameters...
PT-2024-37630 · Zephyr · Zephyr
Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue occurs in the utf8 trunc function found in zephyr/lib/utils/utf8.c, where last byte p might point to the byte just before the string pointer if the string is empty. This is a buffe...
undertow: Improper State Management in Proxy Protocol parsing causes information leakage
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the...
GHSA-5RFV-66G4-JR8H RestrictedPython information leakage via `AttributeError.obj` and the `string` module
Impact A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. Patches The problem will be fixed in version 7.3. Workarounds If the application does not require access to the module string, it can remove it from...
DEBIAN-CVE-2024-47532
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
PYSEC-2024-186
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
UBUNTU-CVE-2024-47532
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
CVE-2024-47532
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
CVE-2024-47532 RestrictedPython information leakage via `AttributeError.obj` and the `string` module
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
CVE-2024-47532 RestrictedPython information leakage via `AttributeError.obj` and the `string` module
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
CVE-2024-8450
Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges...
CVE-2024-8450
PLANET Technology PLANET switches have a hard-coded SNMPv1 community string that grants read-write access, enabling unauthorized remote exploitation. The CVE-2024-8450 entry confirms this vulnerability in certain PLANET switch models, with impact on confidentiality, integrity, and availability (h...
CVE-2024-8450 PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string
Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges...
PT-2024-39020 · Planet Technology · Planet Technology Switch
Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns a hard-coded community string in the SNMPv1 service of certain switch models from PLANET Technology. This allows unauthorized remote attackers to...
PT-2024-32646
Name of the Vulnerable Software and Affected Versions RestrictedPython versions prior to 7.3 Description A user can gain access to protected information indirectly via AttributeError.obj and the string module. This issue allows unauthorized access to potentially sensitive information...
CVE-2024-47532: Exposure of Sensitive Information to an Unauthorized Actor
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
