Netgear R7000P USB ISP Detail Edit DoS

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...

Linux kernel io_uring DoS

The vulnerability of the iouring component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

VMware Open-vm-tools mount.vmhgfs Symbolic Link

The vulnerability of the mount.vmhgfs component in the VMware Open-vm-tools module set is related to incorrect definition of symbolic references before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Firefox Buffer Overflow DoS

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

PT-2024-35489 · Unknown · Bitcoin Core

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 25.0 Description: The issue allows a peer to affect the download state of other peers by sending a mutated block. This can potentially disrupt the normal functioning of the Bitcoin network. Recommendations: For...

pskernel.DLL Unauthenticated RCE

The vulnerability of the pskernel.DLL library, which is used for simulation, design, and drafting in AutoCAD, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information,...

ODXSW_DLL.dll Privilege Escalation

The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD software for simulation, design, and drafting, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

opennurbs.dll ODXSW_DLL.dll Code Execution

The vulnerability of the opennurbs.dll and ODXSWDLL.dll libraries, which are software for modeling, design, and drafting in AutoCAD, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

MongoDB Zero Byte Handling

The vulnerability of the MongoDB database management system server is related to improper elimination of zero bytes. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures by sending specially crafted queries...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server database management system’s component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...

Dream Report Privilege Escalation

The vulnerability of the Dream Report production report and analysis software is related to the improper assignment of permissions. Exploiting this vulnerability can allow attackers to enhance their privileges and cause service interruptions...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

CVE-2024-48970

The CVE-2024-48970 vulnerability affects Baxter Life2000 ventilators, specifically the ventilator’s microcontroller, which lacks memory protection. The issue arises because an attacker could access the internal JTAG interface and read/write flash memory with a standard debugging tool, potentially...

CVE-2024-9832

CVE-2024-9832 affects the Baxter Life2000 ventilator. The root issue is an unlimited number of login attempts using the Clinician Password or Serial Number Clinician Password, enabling brute-force access to the device. Once compromised, an attacker could modify device settings that may disrupt ve...

CVE-2024-3760 Email Bombing Vulnerability in lunary-ai/lunary

In lunary-ai/lunary version 1.2.7, there is a lack of rate limiting on the forgot password page, leading to an email bombing vulnerability. Attackers can exploit this by automating forgot password requests to flood targeted user accounts with a high volume of password reset emails. This not only...

PT-2024-33308 · Unknown · Ventilator

Name of the Vulnerable Software and Affected Versions: Ventilator affected versions not specified Description: The issue concerns the ventilator's failure to perform proper file integrity checks when adopting firmware updates. This allows an attacker to force unauthorized changes to the device's...

Eclipse Vert.x Memory Leak DoS

The vulnerability of the Eclipse Vert.x framework is related to memory leaks. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Tp-Link MR200 Administration Panel DoS

The vulnerability of the /cgi/login file in the Administration Panel of Tp-Link MR200 wireless access points is related to the manipulation of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Libarchive Heap Buffer Overflow DoS

The vulnerability of the executefilteraudio function in the archivereadsupportformatrar.c component of the Libarchive library relates to reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, an...