D-Link DIR-815 Router Code Execution

The vulnerability of the soapcgimain function in D-Link DIR-815 router microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GLSA-202402-08 : OpenSSL: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-08 OpenSSL: Multiple Vulnerabilities - OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors ar...

Delta Industrial Automation DOPSoft Buffer Overflow

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created DPS...

Tenda W6 httpd FormwrlSSIDset Buffer Overflow

The vulnerability of the formwrlSSIDset function in the httpd daemon of the microprogrammed wireless access points Tenda W6 is related to the operation that goes beyond the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow an attacker to compromise th...

Tenda i9 formSetCfm DoS

The vulnerability of the formSetCfm function in the httpd daemon of the microprogrammed wireless access points from Tenda i9 is related to the operation that goes beyond the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow a malicious actor to...

Totolink N200RE Router setOpModeCfg() function Data Compromise

The vulnerability of the setOpModeCfg function in the cstecgi.cgi script of the Totolink N200RE router’s microprogramming system is related to the issue of operations going beyond the buffer boundaries in memory when processing the pppoeUser parameter. Exploiting this vulnerability could allow an...

cstecgi.cgi RCE

The vulnerability in the main function of the cstecgi.cgi script of the Totolink N200RE router software relates to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2024-21436

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the xHCI driver in the Linux kernel, which incorrectly handles isoc Babble and Buffer Overrun events. Specifically, when the xHC reports an error on one of the...

php: 1-byte array overrun in common path resolve code

A vulnerability was found in PHP. This security issue occurs because the core path resolution function allocates a buffer one byte small. Resolving paths with lengths close to the system MAXPATHLEN setting may lead to the byte after the allocated buffer being overwritten with a NULL value, which...

Totolink LR1200GB Router setSmsCfg Code Execution

The vulnerability of the setSmsCfg function in the /cgi-bin/cstecgi.cgi file of the Totolink LR1200GB router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or...

X.Org Server PrivatesHandler Code Execution

The vulnerability of the PrivatesHandler component in the X Window System X.Org Server implementation is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

JXPath Heap Buffer Overflow DoS

The vulnerability of the JXPath object processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

iOS macOS iPadOS Kernel Code Execution

The vulnerability of the kernel of the iOS operating system, the macOS operating system, and the iPadOS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

AIX Buffer Overflow Command Execution

The vulnerability of the AIX operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary commands using invscout...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the derivatespatiallumavectorprediction function in the h.265 Libde265 codec implementation is related to the possibility of writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, a...

OPENSUSE-SU-2024:0023-1 Security update for libuev

This update for libuev fixes the following issues: - Update to 2.4.1: Update README with list of moden Linux APIs used Fix 27: possible buffer overrun in uevrun boo1218749 CVE-2022-48620...

Tenda W9 R7WebsSecurityHandler Code Execution

The vulnerability of the R7WebsSecurityHandler function in the wireless access point software of Tenda W9 relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Security update for libuev (moderate)

openSUSE Security Update: Security update for libuev Announcement ID: openSUSE-SU-2024:0023-1 Rating: moderate References: 1218749 Cross-References: CVE-2022-48620 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This update fo...

WLAvalancheService DoS

The vulnerability of the WLAvalancheService service in the mobile device management system of Avalanche is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using specially created data...

Citrix ADC Buffer Overflow DoS

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway relates to an operation that goes beyond the buffer in memory. Exploiting this vulnerability...