450 matches found
CVE-2024-52059
Buffer Copy without Checking Size of Input 'Classic Buffer Overflow', Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional Security Plugins allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from...
CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5991)
The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5991 advisory. - In function MatchDomainName, input param str is treated as a NULL terminated string despite being user...
The vulnerability of the VPN server in corporate networks of Ivanti Secure Access Client (formerly Pulse Secure Desktop Client) – related to copying buffers without checking the size of the input data – allows a hacker to trigger a service failure.
The vulnerability of the VPN server in corporate networks of Ivanti Secure Access Client formerly Pulse Secure Desktop Client relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
QNAP Systems QTS和QNAP Systems QuTS hero安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...
QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...
QNAP Systems QTS 安全漏洞
QNAP Systems QTS is an entry-level operating system from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems QTS prior to version 5.2.1.2930 build 20241025 and prior to QuTS hero h5.2.1.2929 build 20241025, which stems from a buffer duplication vulnerability...
QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...
NetGear RAX30 安全漏洞
The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a buffer overflow vulnerability that stems from a lack of validation of the length of user-supplied data, which can be exploited by an attacker to execute arbitrary code...
QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is a starter operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS prior to version 5.2.1.2930 build 20241025 and QuTS hero...
The vulnerability in the l2tp.cgi script of the Netgear R8500, XR300, R7000P, and R6400 v2 router software allows a hacker to cause a service failure.
The vulnerability in the l2tp.cgi script of Netgear routers such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffer data without checking the size of the input data during the processing of the l2tpuserip parameter. Exploiting this vulnerability allows a malicious actor to cause...
The vulnerability in the pppoe2.cgi script of the microprogramming software for Netgear XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.
The vulnerability in the pppoe2.cgi microprogramming of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause service failures ...
Unchecked Input for Loop Condition
Overview System.Formats.Nrbf is a package that exposes only one component: NrbfDecoder: a stateless, forward-only decoder class that can decode .NET Remoting Binary Format NRBF binary data from a stream. Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via th...
The vulnerability of the formAdvanceSetup function (/goform/formAdvanceSetup) in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the formAdvanceSetup function /goform/formAdvanceSetup in D-Link DIR-605L router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the webpage...
The vulnerability of the /cgi-bin/v2x00.cgi and /cgi-bin/cgiwcg.cgi web interfaces of DrayTek Vigor software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the /cgi-bin/v2x00.cgi and /cgi-bin/cgiwcg.cgi web interfaces of DrayTek Vigor microprogramming router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the formSetWanPPPoE function (/goform/formSetWanPPPoE) in D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the formSetWanPPPoE function /goform/formSetWanPPPoE in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the formSetWanNonLogin function (/goform/formSetWanNonLogin) in the D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetWanNonLogin function /goform/formSetWanNonLogin in the D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the wacWhitelistJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.
The vulnerability of the wacWhitelistJsonToBin function in the microprogramming software for TP-Link TL-WDR7660 routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a...
The vulnerability of the guestRuleJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.
The vulnerability of the guestRuleJsonToBin function in TP-Link TL-WDR7660 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to trigger a service failure through a specially crafted HTTP request...
The vulnerability of the formSetPortTr function (/goform/formSetPortTr) in D-Link DIR-619L router software allows a hacker to trigger a service failure.
The vulnerability of the formSetPortTr function /goform/formSetPortTr in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a...
The vulnerability of the formSetMuti function (/goform/formSetMuti) in D-Link DIR-619L router software allows a hacker to trigger a service failure.
The vulnerability of the formSetMuti function /goform/formSetMuti of the D-Link DIR-619L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure by sending...