Lucene search
K

15 matches found

Redos
Redos
added 2026/01/28 12:0 a.m.5 views

ROS-20260128-73-0010

A vulnerability in the Linux operating system kernel is related to buffer copying without checking the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely to escalate his privileges...

5.5CVSS6.2AI score0.00157EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.4 views

The vulnerability of the Framework component of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Framework component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.4CVSS5.4AI score0.00095EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.4 views

The vulnerability of the /goform/UserCongratulationsExec file in the Tenda AC10 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the /goform/UserCongratulationsExec microprogramming system for Tenda AC10 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS8AI score0.00683EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.5 views

The vulnerability of the formWlSiteSurvey function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formWlSiteSurvey function in the microprogrammed routing software EDIMAX RE11S lies in the copying of buffers without checking the size of the input data when processing the selSSID parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

10CVSS6AI score0.00894EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2024/05/21 12:0 a.m.3 views

QNAP Systems QTS和QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems, Inc.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QTS and QuTS Hero that stems fr...

8.8CVSS7.2AI score0.00695EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/05 12:0 a.m.8 views

The vulnerability of the Setting Handler component in the software for creating, testing, documenting, publishing, and maintaining the API interface of applications allows a perpetrator to execute arbitrary code.

The vulnerability of the Setting Handler component in software for creating, testing, documenting, publishing, and maintaining the API interface of an application relates to the copying of buffers without checking the size of input data when processing PDF files. Exploiting this vulnerability...

10CVSS8.2AI score0.01457EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.5 views

Synology SSL VPN Client Security Vulnerability

Synology SSL VPN Client is a VPN client software for secure connection to Synology NAS from China-based Synology Inc. A security vulnerability exists in Synology SSL VPN Client prior to version 1.4.7-0687, which stems from a buffer replication in the cgi component that does not check the input...

5.5CVSS6.6AI score0.00194EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:0 a.m.4 views

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.8CVSS7.9AI score0.00872EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/08/08 12:0 a.m.6 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices NFC, which stems from a copy of a buffer that is not checked for input size could cause the...

4.3CVSS6.8AI score0.00265EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.5 views

The vulnerability of the FixMapCfgRpm component (/userRpm/FixMapCfgRpm.htm) in the microprogramming software for TP-Link routers such as TL-WR940N, TL-WR841N, and TL-WR740N allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the FixMapCfgRpm component /userRpm/FixMapCfgRpm.htm of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N lies in the copying of buffers without checking the size of the input data during the processing of the Changed parameter. Exploiting this vulnerability can allow a...

8.6CVSS7.4AI score0.00903EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/06/06 12:0 a.m.5 views

PT-2023-13246 · Qualcomm · Snapdragon +45

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in the core due to a buffer copy without checking the size of the input while processing ioctl queries...

7.8CVSS7.9AI score0.00115EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.6 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

6.5CVSS7.5AI score0.01081EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.4 views

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

10CVSS8.2AI score0.01258EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/02 12:0 a.m.3 views

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Expert, allows a intruder to trigger a service failure.

The vulnerability of the programming software for PLCs programmable logic controllers, EcoStruxure Control Expert, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system remotely...

10CVSS7.2AI score0.01882EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/05/25 12:0 a.m.7 views

The vulnerability of the webSetFrmUpgrade function in the embedded web server, which involves copying buffers without checking the size of the input data, allows a hacker to escalate their privileges and cause a service failure.

The vulnerability of the webSetFrmUpgrade function in the embedded web server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions using a specially crafte...

6.8CVSS5.5AI score
Exploits0References1Affected Software1
Rows per page
Query Builder