CVE-2024-46558

DrayTek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the newProname parameter of the v2x00.cgi endpoint, which can lead to Denial of Service (DoS) via crafted input. The CVE-2024-46558 entry is corroborated across multiple sources in the connected documents, including Red Hat ...

CVE-2024-46588

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46551

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46557

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46551

CVE-2024-46551 affects DrayTek Vigor 3910 (v4.3.2.6). The vulnerability is a buffer overflow in the sBPA_Pwd parameter in the inet15.cgi page, which can be triggered by crafted input and leads to a Denial of Service. Multiple sources confirm the root cause and affected component, but none provide...

CVE-2024-41874

CVE-2024-41874 affects Adobe ColdFusion, specifically versions 2023.9, 2021.15 and earlier. The vulnerability is Deserialization of Untrusted Data (CWE-502) that could lead to arbitrary code execution in the context of the current user. Exploitation is unauthenticated and requires no user interac...

The vulnerability of the libavfilter/vfcodecview.c component of the FFmpeg multimedia library involves an operation that occurs outside the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libavfilter/vfcodecview.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

JFinalCMS 安全漏洞

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 1.0, which stems from a vulnerability that allows an attacker to access or manipulate files on the server that should not be accessible via specially crafted input...

EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2024-2355)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...

Cisco Identity Services Engine REST API Blind SQLi (cisco-sa-ise-rest-5bPKrNtZ)

According to its self-reported version, Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities is affected by a Blind SQL Injection SQLi vulnerability. - Multiple vulnerabilities in the REST API of Cisco Identity Services Engine ISE could allow an authenticated, remote attack...

Buffer Overflow

github.com/pingcap/tidb is vulnerable to a Buffer Overflow. The vulnerability exists due to insufficient validation of the return type when checking the expression between 'Agg' and 'GroupBy', which allows an attacker to cause a Denial of Service DoS via crafted input during the...

CVE-2024-41434

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component Column.GetDecimal. This allows attackers to cause a Denial of Service DoS via a crafted input to the 'RemoveUnnecessaryFirstRow', it will check the expression between 'Agg' and 'GroupBy', but does not check the retu...

CVE-2024-44809

A remote code execution (RCE) vulnerability exists in the Pi Camera project version 1.0 (maintained by RECANTHA). The flaw stems from improper sanitization of user input provided to the position GET parameter in the tilt.php script. An unauthenticated remote attacker can send crafted input contai...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

CVE-2024-41434

PingCAP TiDB v8.1.0 is vulnerable to a buffer overflow within the (*Column).GetDecimal component. The root cause is insufficient validation of the return type when checking expressions between Agg and GroupBy, which can be triggered via a crafted input to the RemoveUnnecessaryFirstRow function. T...

CVE-2024-41433

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the securi...

CVE-2024-41433

PingCAP TiDB v8.1.0 is affected by a buffer overflow vulnerability within the expression.ExplainExpressionList component. This flaw can be triggered via crafted input, potentially leading to a Denial of Service (DoS) . However, PingCAP notes that actual reproduction did not result in service inte...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

DEBIAN-CVE-2024-43700

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment...

UBUNTU-CVE-2024-43700

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment...