CVE-2023-36659

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

Design/Logic Flaw

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...

PT-2023-4990 · Microsoft · 365 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified Microsoft Office Onlin...

Tenda AC6 Denial of Service Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A denial of service vulnerability exists in the Tenda AC6. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited to cause a denial of service device crash via a long string in the...

Amazon Linux 2 : openssl11 (ALAS-2023-2226)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2226 advisory. Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use...

Reorgs could revert the setRange function and lead to a long lasting stale price of USDY

Lines of code Vulnerability details Summary Reorgs could revert the setRange function and therefore lead to stale prices for a long time depending on the off chain protection, against it Vulnerability Details Here is the setRange function of the USDY price oracle: function setRange uint256...

CVE-2021-40546

Tenda AC6 USAC6V4.0RTLV02.03.01.26cn.bin allows attackers who have the administrator password to cause a denial of service device crash via a long string in the wifiPwd5G parameter to /goform/setWifi...

Password Aging With Long Expiration

answerdev/answer is vulnerable to Password Aging With Long Expiration vulnerability. The vulnerability is due to not invalidating/expiring password reset link within a sufficient interval of time. The attacker can reset the password multiple times using the same password reset link and take over...

PT-2023-24773 · M Files · M-Files Server

Name of the Vulnerable Software and Affected Versions: M-Files Server versions prior to 23.8.12892.6 M-Files Server LTS Service Release Versions prior to 23.2 LTS SR3 Description: The issue is an out-of-bounds read that allows an unauthenticated user to read a restricted amount of bytes from...

SUSE-SU-2023:3400-1 Security update for nodejs16

This update for nodejs16 fixes the following issues: Update to LTS version 16.20.2. - CVE-2023-32002: Fixed permissions policies bypass via Module.load bsc1214150. - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire bsc1214156. - CVE-2023-32559: Fixed...

Machine catalog updates failure with error the master VM as an invalid configuration

VMWARE Hypervisor When updating a particular machine catalog with a new master image, the operation fails early on with one of the following: "action name: updatemachinecatalogprovisiningscheme" "action name: MCUpdateMachineCatalog" Error : The master VM as an invalid configuration Same issue...

[SECURITY] [DLA 3530-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3530-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 15, 2023 https://wiki.debian.org/LTS -...

SUSE SLES12: libopenssl-devel / libopenssl1_0_0 / libopenssl1_0_0-32bit / etc (SUSE-SU-2023:3308-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3308-1 advisory. - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. bsc1213853 Tenable has extracted the preceding...

User can claim most of the rewards for a lending market by depositing cNote for just 2 blocks / epoch

Lines of code Vulnerability details Impact For a user to receive rewards for supplying cNote in a lending market LM, he only needs to have supplied the cNote at the end of an epoch. Users staking for the whole duration of an epoch get 0 benefits, compared to users who supply only at the end of th...

SUSE SLED15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:3242-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3242-1 advisory. - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value...

AZL-27859 CVE-2023-39976 affecting package libqb 1.0.5-7

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

CVE-2023-39976

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

UBUNTU-CVE-2023-39976

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

CVE-2023-39976

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

libqb Security Vulnerabilities

libqb is a library used to provide high performance logging, tracing, ipc and polling. A security vulnerability exists in versions prior to libqb 2.0.8, which stems from a buffer overflow allowed via long log messages...