The vulnerability of the get_number() function in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the getnumber function in the Vim text editor relates to the use of the z= command. Users can overflow the counter with values exceeding MAXINT. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the smart.disk.get component in the universal monitoring system Zabbix allows a attacker to execute arbitrary code.

The vulnerability of the smart.disk.get component in the universal monitoring system of Zabbix is related to the introduction of malicious code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2024-3024

A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function getlayer4v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclose...

Tenda FH1203 GetParentControlInfo Method Stack Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

CVE-2024-29229

Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors...

Synology Surveillance Station 安全漏洞

Synology Surveillance Station is an application from Synology, a Chinese company. It provides intelligent monitoring and video management tools to protect your valuable assets. A security vulnerability previously existed in Synology Surveillance Station version 9.2.0-11289, which stemmed from a...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

CVE-2023-25341

The CVE describes a Directory Traversal in Ladle Dev Server (versions 2.5.1 and earlier) that allows an attacker on the same network to read files accessible to the user via GET requests. Red Hat, NVD, CNNVD, and related enrichments corroborate the same impact. No exploit details are provided in ...

CVE-2024-26651

In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnetgetendpoints Add check for usbnetgetendpoints and return the error if it fails in order to transfer the error...

DEBIAN-CVE-2023-45922

glxpbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling glXGetDrawableAttribute. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...

SUSE CVE-2021-47159

In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if -getssetcount fails If ds-ops-getssetcount fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value...

CVE-2024-25735

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request...

CVE-2024-25735

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request...

CVE-2024-25736

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 version 1.2.0.14408, which is caused by the mac parameter of the GetParentControlInfo method in the /goform/GetParentControlInfo file failing to correctly validate the length of the...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

Ivanti Cloud Services Appliance exec cookie command injection

Added: 03/26/2024 Background Ivanti Cloud Services Appliance CSA is an appliance that connects the console and managed devices over the Internet. Problem Cloud Services Appliance 4.5 and 4.6 are affected by a vulnerability which could allow a remote unauthenticated attacker to inject arbitrary...

PT-2024-13306 · Libglvnd +2 · Libglvnd +2

Name of the Vulnerable Software and Affected Versions: OpenGL libglvnd version bb06db5a Description: A segmentation violation was discovered in the libglxproto.c file of OpenGL libglvnd via the glXGetDrawableScreen function. This issue is disputed as there are no common situations where users...