57 matches found
CVE-2022-47515
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
Cross site request forgery (csrf)
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
CVE-2022-47515
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
PT-2022-28068
Name of the Vulnerable Software and Affected Versions drachtio-server versions prior to 0.8.20 Description An issue in drachtio-server allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a long message in a TCP request, which leads to a...
CVE-2022-47515: Improper Null Termination
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
Improper access control
Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...
CVE-2018-16224
Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...
CVE-2018-16224
Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...
CVE-2018-16224: Exposure of Sensitive Information to an Unauthorized Actor
Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...
PT-2018-13441
Name of the Vulnerable Software and Affected Versions iSmartAlarm Cube versions 2.2.4.10 and earlier Description The issue concerns incorrect access control for diagnostic files, allowing an attacker to retrieve sensitive information from the device by sending a specifically crafted TCP request t...
Serva 3.0.0 HTTP Server Denial Of Service
!/usr/bin/env python Serva 3.0.0 HTTP Server Module Remote Denial of Service Exploit Vendor: Patrick Masotta Product web page: http://www.vercot.com Affected version: 3.0.0.1001 Community, Pro, 32/64bit Summary: Serva is a light 3 MB, yet powerful Microsoft Windows application. It was conceived...
DEBIAN-CVE-2015-3294
The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...
Out-of-bounds
The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...
UBUNTU-CVE-2015-3294
The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...
PT-2015-1142
Name of the Vulnerable Software and Affected Versions Dnsmasq versions prior to 2.73rc4 Description The issue allows remote attackers to cause a denial of service and potentially read process memory due to a malfunction in handling DNS requests. This can occur when a malformed DNS request is sent...
LibreOffice 4.3.x < 4.3.3 Impress Remote RCE
A version of LibreOffice is installed on the remote Windows host that is 4.3.x prior to 4.3.3. It is, therefore, affected by a use-after-free vulnerability related to the Impress Remote socket manager that allows denial of service attacks or arbitrary code execution by means of a specially crafte...
CVE-2014-3437: Undefined Security Weakness
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2013-5452: Exposure of Sensitive Information to an Unauthorized Actor
IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
