7390 matches found
CVE-2024-39531 Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols
An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. If a value is configured for DDoS bandwidth or burst parameters for any...
Denial Of Service (DoS)
images is vulnerable to Denial Of Service DoS. The vulnerability is due to unexpected input types provided to multiple functions, which can result in a process crash. The attacker can cause a Segmentation fault error by providing specific integer values to the size function...
GHSA-7VHM-FMPH-7WXW audify vulnerable to Improper Validation of Array Index
All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...
CVE-2024-21523
All versions of the package images are vulnerable to Denial of Service DoS due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. Note: By providing some specific integer values like 0 to the size...
PT-2024-18939 · Unknown · Node-Twain
Name of the Vulnerable Software and Affected Versions: node-twain versions all Description: The issue arises from improper check or handling of exceptional conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily,...
SQL Injection
nhibernate is vulnerable to SQL injection. The vulnerability is due to the lack of proper validation/sanitization of some types implemented from ILiteralType.ObjectToSQLString, allowing attackers to exploit mappings with discriminator values, HQL queries referencing static fields, and the use of...
Fortinet FortiAIOps Security Breach
Fortinet FortiAIOps is a Fortinet networking companion solution that combines artificial intelligence and machine learning AI/ML from Fortinet, Inc. A security vulnerability exists in Fortinet FortiAIOps version 2.0.0, which stems from the presence of an unsatisfactory neutralization of a formula...
CVE-2024-39701
Directus (versions 9.23.0 through 10.5.3) improperly handles the _in and _nin operators by evaluating empty arrays as valid, causing Broken Access Control where a rule like {"role": {"_in": $CURRENT_USER.some_field}} may pass unexpectedly. The issue is fixed in Directus 10.6.0. Affected deploymen...
CVE-2024-39677
NHibernate is an object-relational mapper for the .NET framework. A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. Callers of these methods are exposed to the vulnerability, which includes mappings using inheritance with discriminator values; HQL...
PT-2024-28616 · Hibernate · Hibernate
Name of the Vulnerable Software and Affected Versions: NHibernate versions prior to 5.4.9 NHibernate versions prior to 5.5.2 Description: A SQL injection vulnerability exists in some types implementing ILiteralType.ObjectToSQLString. This vulnerability affects callers of these methods, including...
Django: SQL injection in JSONField KeyTransform
A vulnerability was discovered in the JSONField KeyTransform functionality of Django. The vulnerability allowed SQL injection attacks by crafting malicious user input for the .values method. The vulnerability was demonstrated in the Django test suite, where a SQL syntax error was triggered by...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of incorrect hsize values...
SUSE CVE-2023-24531
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...
MESbook Information Disclosure Vulnerability
MESbook is a web-based system from MESbook Inc. connects to factory machines and converts data into information for real-time management. MESbook has an information disclosure vulnerability that can be exploited by a local attacker to access different resources by changing the application's API...
NetworkManager Resource Management Error Vulnerability
NetworkManager is a network management daemon. A resource management error vulnerability exists in NetworkManager that stems from a problem with the component LLDP, where tampering with an unknown value can result in a denial of service DoS...
SQL Injection
Overview NHibernate is a mature, open source object-relational mapper for the .NET framework. It is actively developed, fully featured and used in thousands of successful projects. Affected versions of this package are vulnerable to SQL Injection when passing unescaped user input to...
MESbook 信息泄露漏洞
MESbook is a web-based system from MESbook Inc. connects to factory machines and converts data into information for real-time management. MESbook has an information disclosure vulnerability that can be exploited by a local attacker to access different resources by changing the application's API...
AZL-43110 CVE-2023-24531 affecting package golang for versions less than 1.21.0-1
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...
CVE-2023-24531
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...