1649 matches found
Tenda AC23 formWifiBasicSet function stack overflow vulnerability
Tenda AC23 is a dual-band gigabit wireless router from Tenda China. tenda AC23 is vulnerable to a buffer overflow vulnerability that stems from the security5g parameter of the formWifiBasicSet function that does not check the length of the input data. No detailed vulnerability details are availab...
TOTOLINK T6 FUN_00418540 Function Stack Overflow Vulnerability
TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the url parameter in the FUN00418540 function not checking its length for input data. A remote attacker can exploit...
TOTOLINK T6 FUN_0041880c Function Stack Overflow Vulnerability
TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN0041880c function not checking its length for input data. A remote attacker can exploi...
Tenda AX1806 formAddMacfilterRule function stack overflow vulnerability
A stack overflow vulnerability exists in the Tenda AX1806 formAddMacfilterRule function, which stems from the fact that the deviceList parameter of the formAddMacfilterRule function does not check the input data for length. No details of the vulnerability are available at this time...
lxml 和 libxml2 代码问题漏洞
lxml is lxml personal developer can interact with Python for locating elements in Html software . libxml2 is an open source library for parsing XML documents . It is written in C, and can be called for a variety of languages, such as C, C++, XSH. A code issue vulnerability exists in lxml and...
The vulnerability of the trusted loading module in Intel microprogrammed system BIOS allows a hacker to enhance their privileges.
The vulnerability of the trusted loading module in Intel microprogramming system BIOS is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2021-33647
When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers...
The vulnerability of the AV1 Video Extension codec, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of the AV1 Video Extension codec is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Huawei MindSpore Community 缓冲区错误漏洞
Huawei MindSpore Community is an open source deep learning framework from Huawei China. Huawei MindSpore Community Tile is vulnerable to an information disclosure vulnerability that stems from accessing sensitive data when the input data type is not int or int32. An attacker could use this...
The vulnerability of BIOS microprogramming software in Dell laptops, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Intel Ethernet ixgbe driver for Linux allows a hacker to trigger a service failure.
The vulnerability of the Intel Ethernet ixgbe driver for Linux exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.
The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Adobe Bridge file manager, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.
The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...
The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.
The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FreeRDP < 2.4.1 Multiple Vulnerabilities
FreeRDP is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
ROS-20220622-01
Vulnerability of the E2fsprogs service utility set is related to a boundary error when processing unreliable input data. Exploitation of the vulnerability could allow an attacker to exploit a specially crafted file system, run an out-of-bounds entry, and execute arbitrary code on the target syste...
The vulnerability relates to the signature verification function of Authenticode for the Windows operating system, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Authenticode signature verification function in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the hardware virtualization system of the Windows Hyper-V operating system from Microsoft allows a perpetrator to trigger a service failure.
The vulnerability of the Windows Hyper-V hardware virtualization system of the Microsoft operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...
The vulnerability of the Adobe Bridge file manager, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...