CVE-2024-46556

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sInRCSecret0 parameter of v2x00.cgi, enabling Denial of Service via crafted input. Affected product and exact root cause are stated in multiple sources (CVE-2024-46556; NVD/Red Hat/CNNVD). Exploitation details are not provid...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46551

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46588

CVE-2024-46588 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The issue is a buffer overflow in the sProfileName parameter of wizfw.cgi, leading to Denial of Service via crafted input. Exploitation details are not provided in the connected documents; no remediation or workaround is stated in the...

CVE-2024-46592

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46564

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-41874

CVE-2024-41874 affects Adobe ColdFusion, specifically versions 2023.9, 2021.15 and earlier. The vulnerability is Deserialization of Untrusted Data (CWE-502) that could lead to arbitrary code execution in the context of the current user. Exploitation is unauthenticated and requires no user interac...

JFinalCMS 安全漏洞

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 1.0, which stems from a vulnerability that allows an attacker to access or manipulate files on the server that should not be accessible via specially crafted input...

The vulnerability of the libavfilter/vfcodecview.c component of the FFmpeg multimedia library involves an operation that occurs outside the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libavfilter/vfcodecview.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

Cisco Identity Services Engine REST API Blind SQLi (cisco-sa-ise-rest-5bPKrNtZ)

According to its self-reported version, Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities is affected by a Blind SQL Injection SQLi vulnerability. - Multiple vulnerabilities in the REST API of Cisco Identity Services Engine ISE could allow an authenticated, remote attack...

EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2024-2355)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...

Buffer Overflow

github.com/pingcap/tidb is vulnerable to a Buffer Overflow. The vulnerability exists due to insufficient validation of the return type when checking the expression between 'Agg' and 'GroupBy', which allows an attacker to cause a Denial of Service DoS via crafted input during the...

CVE-2024-41434

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component Column.GetDecimal. This allows attackers to cause a Denial of Service DoS via a crafted input to the 'RemoveUnnecessaryFirstRow', it will check the expression between 'Agg' and 'GroupBy', but does not check the retu...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

CVE-2024-44809

A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...

CVE-2024-44809

The CVE-2024-44809 entry corresponds to the Pi Camera project (version 1.0, RECANTHA) with a vulnerability in tilt.php where the position parameter is not properly sanitized. This allows an attacker to craft input that executes arbitrary commands on the server with web server permissions, via rem...

CVE-2024-41433

CVE-2024-41433 affects PingCAP TiDB 8.1.0, with a buffer overflow in the component expression.ExplainExpressionList. The vulnerability could allow an attacker to induce a Denial of Service via crafted input. PingCAP notes that the reproduced issue did not cause service interruption for other user...

CVE-2024-41434

PingCAP TiDB v8.1.0 is affected by a buffer overflow in the (*Column).GetDecimal path that can enable a Denial of Service via crafted input to RemoveUnnecessaryFirstRow. The issue arises because the code checks the expression between Agg and GroupBy but does not verify the return type. PingCAP di...

CVE-2024-41433

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the securi...

DEBIAN-CVE-2024-43700

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment...