Open5Gs Denial of Service Vulnerability

Open5Gs is a C open source implementation of 5G Core and Epc, the core network for the Lte/Nr network.A denial of service vulnerability exists in Open5Gs version 2.1.4 of AMF, which stems from a network system or product that does not properly validate data boundaries when performing operations o...

Wind River VxWorks Buffer Overflow Vulnerability (CNVD-2022-55065)

Wind River VxWorks is an operating system from Wind River, Inc. an industry-leading real-time operating system for building embedded devices and systems.Wind River VxWorks suffers from a buffer overflow vulnerability that stems from a networked system or product that does not properly validate da...

The vulnerability of the zlib library, related to the execution of operations beyond buffer boundaries in memory, allows attackers to cause a service failure.

The vulnerability of the zlib library lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted data to the application...

GHSA-QGPV-86R3-87FH Cross-site Scripting in Parsedown

Parsedown version prior to 1.7.0 contains a Cross Site Scripting XSS vulnerability in setMarkupEscaped for escaping HTML that can result in JavaScript code execution. This attack appears to be exploitable via specially crafted markdown that allows it to side step HTML escaping by breaking AST...

Cross-site Scripting in Parsedown

Parsedown version prior to 1.7.0 contains a Cross Site Scripting XSS vulnerability in setMarkupEscaped for escaping HTML that can result in JavaScript code execution. This attack appears to be exploitable via specially crafted markdown that allows it to side step HTML escaping by breaking AST...

The vulnerability of Mozilla Firefox browsers, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browsers is related to the execution of operations beyond the buffer boundaries in memory when processing HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...

Tenda AC10-1200 Buffer Overflow Vulnerability (CNVD-2022-38544)

Tenda AC10-1200 is a wireless router from Tenda China.A buffer error vulnerability exists in the Tenda AC10-1200, which stems from a failure to properly validate data boundaries when performing operations on memory in the setSmartPowerManagement function. An attacker could exploit this...

Tenda AC10-1200 Buffer Overflow Vulnerability (CNVD-2022-38545)

The Tenda AC10-1200 is a wireless router from Tenda, China. tenda AC10-1200 suffers from a buffer error vulnerability, which stems from the urls parameter in the saveParentControlInfo function not properly validating data boundaries when performing operations on memory. An attacker could exploit...

ASUS RT-AC68U and RT-AC5300 Command Injection Vulnerability

The ASUS RT-AC68U and ASUS RT-AC5300 are both routers from the Chinese company ASUS. A command injection vulnerability exists in the Asus RT-AC68U prior to version 3.0.0.4.385.20633 and RT-AC5300 prior to version 3.0.0.4.384.82072, which stems from a failure to properly validate data boundaries...

The vulnerability of the `pjsua_recorder_create` function in the multimedia communication library PJSIP, related to reading beyond the buffer limit in memory, allows attackers to cause service failures.

The vulnerability of the pjsuarecordercreate function in the PJSIP multimedia communication library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Tenda AC6 Buffer Overflow Vulnerability

Tenda AC6 is a wireless router from Tenda, China. Tenda AC6 is vulnerable to a buffer overflow vulnerability, which stems from the deviceId parameter in the saveParentControlInfo function that does not properly validate data boundaries when performing operations on memory, and can be exploited by...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26242)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetVirtualServerCfg function that does not properly validate data boundaries when executing operations on memory, and can be...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26246)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which originates when the list parameter in the SetIpMacBind function does not properly validate data boundaries when performing operations on memory, and can be exploit...

Adobe Acrobat Reader Dc Buffer Overflow Vulnerability (CNVD-2022-29566)

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe USA. Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier contain a buffer error vulnerability that stems from the fact that the vulnerability stems from a networked system or...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26247)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the firewallCfg parameter in the SetFirewallCfg function that does not properly validate data boundaries when performing operations on memory, and can b...

Buffer Overflow Vulnerability in Multiple Apple Products (CNVD-2022-23007)

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, Apple iPadOS is an operating system for iPad tablets, and Apple watchOS is a smartwatch operating system. A buffer overflow vulnerability exists in several Apple products. The...

Buffer Overflow Vulnerability in Multiple Apple Products (CNVD-2022-23006)

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system for mobile devices, Apple iPadOS is an operating system for iPad tablets, Apple watchOS is an operating system for smartwatches, and Apple tvOS is an operating system for smartphones. Apple tvOS is a smart TV...

The vulnerability of the Google Chrome browser’s Web Serial API interface allows a perpetrator to trigger a service failure.

The vulnerability of the Google Chrome browser’s Web Serial API interface is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a specially created HTML page...

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, lies in the ability to write data beyond the buffer boundaries in memory. This allows attackers to disclose sensitive information or execute arbitrary code.

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive...

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20075)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 2.3.8, which originates from the /cloudconfig/routerpost/modifyaccountpwd function on memory execution An authenticated attacker could use this vulnerability to execute...