810 matches found
The vulnerability of the formIPMacBindAdd() function (/goform/add_ip_mac_bind) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formIPMacBindAdd function /goform/addipmacbind of the Tenda W15E router software lies in the issue of the operation going beyond the buffer in memory when processing the IPMacBindRule parameter. Exploiting this vulnerability allows an attacker to compromise the...
The vulnerability of the formDelDhcpRule() function (/goform/DelDhcpRule) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formDelDhcpRule function /goform/DelDhcpRule in the Tenda W15E router software is related to the issue of the operation going beyond the buffer in memory when processing the delDhcpIndex parameter. Exploiting this vulnerability could allow an attacker to compromise the...
kernel: mm/sparsemem: fix race in accessing memory_section->usage
A race condition was found on a PFN in the Linux Kernel, which can fall into the device memory region with the system memory configuration. Normal zone start and end PFNs contain the device memory PFNs as well, and the compaction triggered will try on the device memory PFNs and end up in NOP. Thi...
edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...
kernel: netfilter: divide error in nft_limit_init
A denial of service flaw was found in nftlimitinit in netfilter's nftlimit in the Linux Kernel. This issue occurs due to an inappropriate math function selection, which may cause an availability threat...
PT-2024-3184 · Freerdp +9 · Freerdp +9
Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 3.5.1 Description: The issue is related to an out-of-bounds read in the FreeRDP client, specifically in the freerdp image copy function. This can be exploited by a remote attacker to impact the confidentiality,...
The vulnerability of the fromDhcpListClient function (/goform/DhcpListClient) in the Tenda FH1203 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda FH1203 router software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
The vulnerability of the formQuickIndex() function (/goform/QuickIndex) in the Tenda AC15 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formQuickIndex function /goform/QuickIndex of the Tenda AC15 router’s software lies in the fact that the operation outputs data beyond the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability allows an attacker to compromise the...
gmp: Integer overflow and resultant buffer overflow via crafted input
A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability...
The vulnerability of the bpf_map_put() function in the kernel/bpf/syscall.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpfmapput function in the kernel/bpf/syscall.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the function `of_pwm_single_xlate()` in the drivers/pwm/core.c file of the Linux operating system’s PWM device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PWM device driver in the Linux operating system involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the cipso_v4_map_lvl_valid function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cipsov4maplvlvalid function in Linux kernel relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the __vsyslog_internal function in the GNU C Library, related to incorrect calculation of buffer size, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the vsysloginternal function in the GNU C Library is related to incorrect calculation of the buffer size. Exploiting this vulnerability may allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2023-41706
Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing of user-defined...
The vulnerability of the fromDhcpListClient function in the Tenda AC10U router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromDhcpListClient function in the Tenda AC10U router’s software relates to the reading of data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the formwrlSSIDset() function in the httpd daemon of the wireless access point Tenda W6 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formwrlSSIDset function in the httpd daemon of the microprogrammed wireless access points Tenda W6 is related to the operation that goes beyond the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow an attacker to compromise th...
SUSE CVE-2022-36765
EDK2 is susceptible to a vulnerability in the CreateHob function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...
CVE-2023-3043 Stack-based Buffer Overflow BMC
AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...
CVE-2022-36765 Integer Overflow in CreateHob
EDK2 is susceptible to a vulnerability in the CreateHob function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...
AMI MegaRAC SPx Buffer Error Vulnerability
AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...