1510 matches found
The vulnerability of the PIM protocol implementation in the Cisco IOS XE operating system allows a attacker to trigger a service failure.
The vulnerability of the Protocol Independent Multicast PIM protocol implementation in the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
PT-2024-7255 · Abb · Abb Ac 800M
Name of the Vulnerable Software and Affected Versions: ABB AC 800M affected versions not specified Description: The issue is related to errors in processing input data in the ABB AC 800M controller firmware. It allows a remote attacker to execute arbitrary commands by sending specially crafted MM...
The vulnerability of microprogrammed software in Siemens LOGO!8 BM and SIPLUS LOGO! controllers arises from incorrect checking of specified indices, positions, or offsets in input data. This allows unauthorized access by attackers to protected information.
The vulnerability of the microprogrammed software of Siemens LOGO!8 BM and SIPLUS LOGO! lies in the improper checking of specified indices, positions, or offsets in input data during TCP packet processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protecte...
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, and GuardLogix programmable logic controllers allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, and GuardLogix controllers is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system from a remote location...
ROS-20241004-09
Vulnerability of the matchflags function of the Netfilter subsystem of the Linux kernel is related to the reading of data outside of buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information or cause a denial of...
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, GuardLogix, and Communication Module 1756-EN4 systems allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software in Rockwell Automation’s CompactLogix, ControlLogix, GuardLogix, and Communication Module 1756-EN4 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system remotely...
ROS-20240927-01
Vulnerability of FFmpeg multimedia library function loadinputpicture is related to buffer copying without checking input data size. checking the size of the input data. Exploitation of the vulnerability could allow an attacker to execute arbitrary code Vulnerability in interpolate component...
The vulnerability of the SAE H2E authentication protocol implementation in the embedded operating system OpenWrt allows a hacker to downgrade the version of the authentication protocol used.
The vulnerability of the SAE H2E authentication protocol implementation in the embedded operating system OpenWrt is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to downgrade the version of the authentication protocol used...
The vulnerability of the Downloads component in Microsoft Edge and Google Chrome browsers allows a perpetrator to compromise data integrity.
The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially crafted HTML page...
TOTOLINK AC1200 setWizardCfg function buffer overflow vulnerability
TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK AC1200 v4.1.5cu.861B20230220 version, which stems from the failure of the ssid5g parameter of the setWizardCfg function to correctly validate the length and...
DrayTek Vigor 3910 Buffer Overflow Vulnerability (CNVD-2024-39950)
The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which is caused by the sPPPSrvNm parameter on the fwuser.cgi page not properly validating the length of the input data, and can be...
DrayTek Vigor 3910 Buffer Overflow Vulnerability (CNVD-2024-39949)
The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which is caused by the sProfileName parameter on the fextobj.cgi page not properly validating the length of input data, and can be...
The vulnerability of the Microsoft SharePoint Server software, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft SharePoint Server software, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SharePoint Server software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the av_malloc function in the libavutil/mem.c component of the FFmpeg multimedia library, which involves copying buffers without checking the input data, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the avmalloc function in the libavutil/mem.c component of the FFmpeg multimedia library is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...
ROS-20240910-01
A vulnerability in the HAProxy server software is related to entering an infinite loop when given certain input data. of certain inputs. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service...
The vulnerability of the server software HAProxy lies in its ability to enter an infinite loop when processing certain input data, allowing a hacker to cause a service failure.
The vulnerability of the server software HAProxy is related to its ability to enter an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the PDF file analysis component in the ClamAV antivirus program allows a hacker to trigger a service failure.
The vulnerability of the PDF file analysis component in the ClamAV antivirus program is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failures when the user downloads a specially crafted PDF file for analysis...
CVE-2024-44809
The CVE-2024-44809 entry corresponds to the Pi Camera project (version 1.0, RECANTHA) with a vulnerability in tilt.php where the position parameter is not properly sanitized. This allows an attacker to craft input that executes arbitrary commands on the server with web server permissions, via rem...
CVE-2024-44809
A remote code execution RCE vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The issue arises from improper sanitization of user input passed to the "position" GET parameter in the tilt.php script. An attacker can exploit this by sending crafted input data that...