Tenda AC500 fromDhcpListClient method list1 parameter buffer overflow vulnerability

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, with support for managing wireless networks across VLANs. A buffer overflow vulnerability exists in the Tenda AC500, which stems from the list1 parameter of the fromDhcpListClient method...

Tenda AC7 Buffer Overflow Vulnerability

Tenda AC7 is a dual-band router from Tenda Technology, focusing on signal coverage and high-speed transmission for large households. Tenda AC7 suffers from a buffer overflow vulnerability, which stems from the PPW parameter of the fromWizardHandle method failing to properly validate the length an...

Tenda AC500 fromSetVlanInfo Method Buffer Overflow Vulnerability

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, supporting cross-VLAN management of wireless networks. A buffer overflow vulnerability exists in the Tenda AC500, which originates from the port parameter of the fromSetVlanInfo method of the...

SUSE SLES12: libwireshark9 / libwiretap7 / libwscodecs1 / libwsutil8 / wireshark / etc (SUSE-SU-2024:1354-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1354-1 advisory. - CVE-2024-24476: Fixed a denial of service in wsmanuflookupstr bsc1220181 Tenable has extracted the preceding description block directly fr...

PT-2024-4524 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to the fixed version Description: The issue is related to a buffer overflow vulnerability in the ff gaussian blur 8 function, located in libavfilter/edge template.c, which can allow a local attacker to execute arbitrary...

CVE-2023-49501

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the configeqoutput function in the libavfilter/asrcafirsrc.c:495:30 component...

PT-2024-4519

Name of the Vulnerable Software and Affected Versions: Ffmpeg version N113007-g8d24a28d06 Description: The issue is related to a buffer overflow vulnerability in the interpolate component of the Ffmpeg library, specifically in the libavfilter/vf minterpolate.c file. This vulnerability is caused b...

CVE-2023-50009

FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ffgaussianblur8 function in libavfilter/edgetemplate.c:116:5 component...

PT-2024-23737 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.21.7 Description: The issue is related to a Buffer Overflow vulnerability in the get var integer function in mqtt parser.c. This allows remote attackers to cause a denial of service via a series of specially crafted hexstream...

RHEL 8 : edk2 (RHSA-2024:1722)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1722 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...

Mageia: Security Advisory (MGASA-2024-0076)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28219

In imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy...

FreeImage buffer overflow vulnerability (CNVD-2025-10042)

FreeImage is a cross-platform open source library for supporting popular graphic image formats. FreeImage suffers from a buffer overflow vulnerability that stems from the program's failure to properly validate the length and size of input data, which can be exploited by an attacker to cause a...

CVE-2024-28582

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the rgbeRGBEToFloat function when reading images in HDR format...

TOTOLINK X5000R and A7000R Buffer Overflow Vulnerability

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A buffer overflow vulnerability exists in the TOTOLINK X5000R and A7000R. The vulnerability originates from the sub41F7E8 function in the /www/cgi bin/cstegi.cgi file copying the contents of the IP field without checking the data...

MGASA-2024-0064 Updated imagemagick packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation...

Siemens Simcenter Femap Buffer Overflow Vulnerability (CNVD-2024-13809)

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens. It is used to create, edit and import/reuse mesh-based finite element analysis models of complex products or systems. A buffer overflow vulnerability exists in versions prior to Siemens Simcenter Femap...

Cisco Small Business Buffer Overflow Vulnerability (CNVD-2024-37606)

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from a buffer overflow vulnerability that stems from insufficient validation of user-supplied input in the web-based user interface, which can be exploited by an authenticated, remote attacker to...

SUSE SLED15: giflib-devel / giflib-devel-32bit / giflib-progs / libgif7 / etc (SUSE-SU-2024:0786-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0786-1 advisory. Update to version 5.2.2 Fixes for CVE-2023-48161 bsc1217390, CVE-2022-28506 bsc1198880 138...

PT-2024-2134 · Cisco · Cisco Small Business 500 Series Wireless Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the web-based user interface of the affected devices. This vulnerability...