3958 matches found
CVE-2021-33265
D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...
The vulnerability of the 3D viewer software, related to errors in code generation, allows a hacker to execute arbitrary code.
The vulnerability of the 3D viewer software is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...
D-Link DIR-809 缓冲区错误漏洞
D-Link DIR-809 is a dual-band router from D-Link China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c of the software formVirtualApp A stack buffer overflow vulnerability exists in the function. The...
php_code_audit_project
The provided code snippet appears to be a PDF document containing a vulnerability report for ThinkPHP, a PHP framework. The report describes a request function vulnerability that allows for remote code execution. The code snippet is a PDF document with a single page containing a table with severa...
The vulnerability of the Multimedia Console, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.
The vulnerability of the Multimedia Console is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...
Ivanti Avalanche EnterpriseServer Service SQL Injection Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SettingsDaoImpl class. A...
The vulnerability of the Microsoft Access component in Microsoft Office programs and Microsoft 365 apps allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Access components in Microsoft Office and Microsoft 365 apps is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted request...
PT-2021-5043 · Microsoft · Windows Ntfs +1
Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows NTFS file system, allowing remote attackers to execute arbitrary code using a specially crafted request. Thi...
PT-2021-5014 · Microsoft · Remote Desktop Client +1
Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop Client affected versions not specified Description: The vulnerability is related to incorrect code generation management in the Remote Desktop Client component of the Windows operating system. It allows remote attacke...
PT-2021-4807 · Microsoft · Access +1
Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to incorrect code generation management in a Microsoft Access component, which is part of Microsoft Office and Microsoft 365 Apps. This can be exploited by a...
Cisco Small Business 输入验证错误漏洞
Cisco Small Business is a switch from Cisco. Cisco Small Business switch An input validation error vulnerability exists, which results from improper validation of HTTP requests on a web management page. An attacker could exploit this vulnerability to cause dos by sending a crafted HTTP request to...
openSUSE 15 Security Update : apache2 (openSUSE-SU-2021:1438-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1438-1 advisory. - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier...
OPENSUSE-SU-2021:1438-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. bsc1190703 - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. bsc1190702 - CVE-2021-39275: Fixed an out-of-bounds write in apescapequotes via malicious inpu...
FortiPortal - XSS vulnerability
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid...
CLSA-2021-1635458969 Fix CVE(s): CVE-2021-40438, CVE-2021-34798, CVE-2021-39275
SECURITY UPDATE: Buffer overflow with crafted input - debian/patches/CVE-2021-39275.patch:apescapequotes may write beyond the end of a buffer when given malicious input - CVE-2021-39275 SECURITY UPDATE: Malformed requests may cause the server to dereference a NULL pointer -...
CVE-2021-34762 Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to...
Denial Of Service (DoS)
github.com/ethereum/go-ethereum is vulnerable to denial of service. An attacker is able to exploit the vulnerability by sending a maliciously crafted request, causing the system to crash...
CVE-2021-34595
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...