9368 matches found
CVE-2024-10455 Reachable Assertion in µD3TN
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
CVE-2024-10455
CVE-2024-10455 affects µD3TN v0.14.0’s BPv7 parser. A reachable assertion can be triggered by a malformed Extension Block, potentially disrupting service. Reported across multiple feeds (Red Hat, NVD, CNNVD, PT-Security, etc.). Mitigation notes from PT-Security suggest disabling the BPv7 parser u...
CVE-2024-10455
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...
D-Link DIR-605L Router Data Compromise
The vulnerability of the formSetWANWizard51 and formSetWANWizard52 functions in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
ODXSW_DLL.dll Disclosure Arbitrary Code DoS
The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD modeling, design, and drawing software, relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information, execute arbitrary code, or cause a service...
Oracle MySQL Server Disruption
The vulnerability of the Oracle MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...
edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...
Oracle VM VirtualBox Core Component Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
Connector/ODBC driver for MySQL
The vulnerability of the Connector/ODBC driver for MySQL Connectors in the Oracle MySQL database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, or delet...
PT-2024-9135 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.2 through 17.3.5 GitLab CE/EE versions 17.4 through 17.4.2 GitLab CE/EE versions 17.5 through 17.5.0 Description: A denial of service issue has been discovered in GitLab CE/EE. This issue can be exploited by importing...
MySQL InnoDB DoS
The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Juniper Networks’ Junos OS DoS
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of specified input types. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Junos OS Evolved CLI DoS
The vulnerability of the command-line interface CLI of the Junos OS Evolved router operating system QFX5000, where resources are not properly cleaned or released. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Cisco Small Business RV042 Router Code Execution
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...
MySQL InnoDB DoS
The vulnerability of the InnoDB component in the MySQL Database Management System is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the MySQL protocol...
Linux USB Driver Heap Buffer Overflow DoS
The vulnerability of the usbstringcopy function in the drivers/usb/gadget/configfs.c file of the Linux kernel’s USB gadget driver relates to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Cisco Small Business RV042 Router Code Execution
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...
Linux kernel DoS
The vulnerability of the kernel component of the Linux operating system is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Oracle MySQL Server Optimizer DoS
The vulnerability of the Optimizer component of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...