3582 matches found
xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...
xorg-x11-server: heap buffer overflow in DisableDevice
A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments...
xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remo...
RHEL 9 : xorg-x11-server-Xwayland (RHSA-2024:2170)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2170 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: Out-of-bounds write in...
ALSA-2024:2562 Important: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 golang: net/http/cookiejar: incorrect...
RHEL 9 : xorg-x11-server (RHSA-2024:2169)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2169 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical use...
FreeBSD : powerdns-recursor -- denial of service (1af16f2b-023c-11ef-8791-6805ca2fa271)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1af16f2b-023c-11ef-8791-6805ca2fa271 advisory. - A crafted response from an upstream server the recursor has been configured to forward-recurse to can...
Amazon Linux AMI : xorg-x11-server (ALAS-2024-1932)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1932 advisory. Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer NOTE: https://lists.x.org/archives/xorg/2024-January/061525.htmlNOTE:...
The vulnerability of the Packet Forwarding Engine (PFE) in the Junos OS router of the Juniper SRX4600, which allows a attacker to cause a service failure
The vulnerability of the Packet Forwarding Engine PFE mechanism in the Junos OS router Juniper SRX4600 relates to the operation of writing data outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted netwo...
SUSE CVE-2024-25583
A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected...
DEBIAN-CVE-2024-25583
A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected...
powerdns-recursor -- denial of service
PowerDNS Team reports: PowerDNS Security Advisory 2024-02: if recursive forwarding is configured, crafted responses can lead to a denial of service in Recursor...
TOTOLINK N300RT Port Forwarding Function Cross-Site Scripting Vulnerability
The TOTOLINK N300RT is a wireless router designed for home and small business users. The TOTOLINK N300RT suffers from a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data by the Port Forwarding feature on the Firewall page, whic...
The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos routers of the MX series allows a attacker to cause a service failure.
The vulnerability of the Packet Forwarding Engine PFE in Juniper Networks’ Junos routers of the MX series is related to improper handling of exceptional states. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos routers of the SRX300 series, which allows a attacker to cause a service failure.
The vulnerability of the packet forwarding mechanism PFE in Juniper Networks’ Junos routers of the SRX300 series relates to the disclosure of information in the error data field. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2024-24978)
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability that originates from a security flaw in the packet forwarding...
CVE-2024-32327
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Port Forwarding under the Firewall Page...
CVE-2024-32327
TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting XSS vulnerability in Port Forwarding under the Firewall Page...
CVE-2024-32327
TOTOLINK N300RT is affected by a Store Cross-site Scripting (XSS) vulnerability in the Port Forwarding feature of the Firewall page, impacting firmware version V2.1.8-B20201030.1539. The root cause, as described across sources, is improper handling/escaping of user-supplied data in Port Forwardin...
