Sipwise C5 NGCP CSC 跨站脚本漏洞

Sipwise C5 NGCP CSC is an application system from Sipwise Austria. A core system for unified communications solutions. A cross-site scripting vulnerability exists in Sipwise C5 NGCP CSC CEm39.3.1 version and prior versions, which stems from input passed via several parameters to several scripts...

PT-2021-8101 · Sox +3 · Sox +3

Name of the Vulnerable Software and Affected Versions: SoX affected versions not specified Description: A heap-buffer-overflow occurs in the startread function in the hcom.c file. This issue is exploitable with a crafted hcomn file, which could cause an application to crash. The vulnerability is...

CVE-2021-28202

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28196

The specific function in ASUS BMC’s firmware Web management page Generate SSL certificate function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

CVE-2021-28186

The specific function in ASUS BMC’s firmware Web management page ActiveX configuration-2 acquisition does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28189

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28192

The specific function in ASUS BMC’s firmware Web management page Remote video storage function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

CVE-2021-28177

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28179

The specific function in ASUS BMC’s firmware Web management page Media support configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

CVE-2021-28175

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

Tobesoft Xplatform Code Execution Vulnerability (CNVD-2021-25270)

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A security vulnerability exists in Tobesoft Xplatform, which stems from an unchecked offset input range...

The vulnerability of the microprogramming software of the Intel Modular Server MFS2600KI arises from copying buffers without checking the size of the input data. This allows a malicious actor to cause service failures.

The vulnerability of the Microprogramming Software of the Intel Modular Server MFS2600KI is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Mozilla Firefox browser, related to the lack of a mechanism for checking input data, allows attackers to carry out spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanism for checking the input character “i”. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

Infraware Polaris ML Report Program Buffer Error Vulnerability

Infraware Polaris ML Report is a web browser based web software from Infraware, Korea that enables compatibility printing reports. A security vulnerability exists in ML Report Program, which originates from a stack-based buffer overflow in the sub41EAF0 function of mlreportdeam .exe. The function...

Genvini Dlt-daemon Buffer Error Vulnerability

Genvini Dlt-daemon is a Genvini organization's software for logging and tracing. The software provides a logging and tracing interface using a standardized protocol specified in the AUTOSAR Standard 4.0 DLT, and is used as a logging framework in some programs. A buffer error vulnerability exists ...

nss: Check length of inputs for cryptographic primitives

A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability...

The vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, lies in the fact that they allow copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the copying of buffers without checking the size of the input data. Exploiting these vulnerabilities can allow a malicious acto...

The vulnerability of the `SyncRes::processAnswer` function in the recursive DNS server PowerDNS Recursor allows a attacker to access confidential data.

The vulnerability of the SyncRes::processAnswer function in the recursive DNS server PowerDNS Recursor is related to the lack of a mechanism for verifying the correctness of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data...

CVE-2020-8729

Buffer copy without checking size of input for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the user interface in Google Chrome browsers allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome browsers is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...