Regular Expression Denial Of Service (ReDoS)

d3-color is vulnerable to regular expression denial of service. The vulnerability exists due to an ambiguous regular expression allowing an attacker to exploit the vulnerability by causing backtracking via a maliciously crafted string...

CVE-2022-40106

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the setlocaltime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40105

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

Buffer overflow

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

Buffer overflow

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40102

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

Tenda i9 缓冲区错误漏洞

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formexeCommand function, which can be exploited by attackers to cause a denial of service via a specially crafted string...

Tenda i9 缓冲区错误漏洞

Tenda i9 is an enterprise wireless AP device. a buffer overflow vulnerability exists in the Tenda i9 formwrlSSIDgett function, which can be exploited by attackers to cause a denial of service DoS via a specially crafted string...

PT-2022-25206

Name of the Vulnerable Software and Affected Versions Tenda i9 version 1.0.0.83828 Description The issue is related to a buffer overflow via the formSetAutoPing function, allowing attackers to cause a Denial of Service DoS by sending a crafted string. Recommendations For Tenda i9 version...

CVE-2022-40107: Out-of-bounds Write

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40106: Out-of-bounds Write

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the setlocaltime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40105: Out-of-bounds Write

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formWifiMacFilterGet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40103: Out-of-bounds Write

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40102: Out-of-bounds Write

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

CVE-2022-40101: Out-of-bounds Write

Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...

Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

GHSA-GVGC-RXMH-5HVW Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

GHSA-V6RP-3R3V-HF4P Ruby OpenSSL DoS Vulnerability

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service interpreter crash via a crafted string. The openssl gem that contains this module is patched in version 2.0.0...

Ruby OpenSSL DoS Vulnerability

The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service interpreter crash via a crafted string. The openssl gem that contains this module is patched in version 2.0.0...

PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests

classes/GoogleSpell.php in the PHP Spellchecker aka Google Spellchecker addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote...