Lucene search
K

208 matches found

CNNVD
CNNVD
added 2023/08/02 12:0 a.m.2 views

ngiflib Security Vulnerabilities

ngiflib is a library for decoding the GIF image format written in C. It has a vulnerability that stems from a segmentation error in the main method of the gif2tag.c file. A security vulnerability exists in ngiflib, which is caused by a segmentation error in the main method of the gif2tag.c file...

5.5CVSS6.8AI score0.00027EPSS
Exploits1References2
CVE
CVE
added 2023/08/02 12:0 a.m.41 views

CVE-2023-39113

CVE-2023-39113 affects ngiflib (a C library for decoding GIFs). The vulnerability is a segmentation fault in the main function of gif2tag.c, triggered when running the gif2tga tool. Documented impact indicates a segmentation fault (availability impact) but does not provide exploitable vectors, af...

5.5CVSS5.5AI score0.00027EPSS
Exploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability in the main() function of the cli/wvunpack.c component of the WavPack audio codec allows a hacker to cause a service failure.

The vulnerability of the main function in the cli/wvunpack.c component of the WavPack audio codec is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

5.5CVSS5.7AI score0.00029EPSS
Exploits1References7Affected Software3
SUSE CVE
SUSE CVE
added 2023/02/15 5:47 a.m.2 views

SUSE CVE-2012-2108

Stack-based buffer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file...

9.3CVSS8.3AI score0.05809EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/01/07 12:0 a.m.2 views

PT-2023-10202 · Unknown · Fumon Trello-Octometric

Name of the Vulnerable Software and Affected Versions: Fumon trello-octometric affected versions not specified Description: A critical issue has been found in Fumon trello-octometric, affecting the main function of the file metrics-ui/server/srv.go. The manipulation of the num argument leads to s...

9.8CVSS6.3AI score0.00297EPSS
Exploits0References5
CNVD
CNVD
added 2022/11/25 12:0 a.m.1 views

TOTOLINK LR350 main function buffer overflow vulnerability

TOTOLINK LR350 is a 4G LTE router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. A buffer overflow vulnerability exists in the TOTOLINK LR350. The vulnerability stems from a pre-authentication buffer overflow in the main...

9.8CVSS8.3AI score0.00729EPSS
Exploits1References1
NVD
NVD
added 2022/11/23 4:15 p.m.12 views

CVE-2022-44255

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a pre-authentication buffer overflow in the main function via long post data...

9.8CVSS0.00729EPSS
Exploits1References1
OSV
OSV
added 2022/11/23 4:15 p.m.2 views

CVE-2022-44255

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a pre-authentication buffer overflow in the main function via long post data...

9.8CVSS6AI score
Exploits0References1
Prion
Prion
added 2022/11/23 4:15 p.m.15 views

Design/Logic Flaw

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a pre-authentication buffer overflow in the main function via long post data...

7.5CVSS9.6AI score0.00729EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/11/23 12:0 a.m.2 views

TOTOLINK LR350 缓冲区错误漏洞

TOTOLINK LR350 is a 4G LTE router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. A buffer overflow vulnerability exists in the TOTOLINK LR350. The vulnerability stems from a pre-authentication buffer overflow in the main...

9.8CVSS8.2AI score0.00729EPSS
Exploits1References2
CVE
CVE
added 2022/11/23 12:0 a.m.55 views

CVE-2022-44255

Totolink LR350 with firmware 9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function that can be triggered by long POST data. The issue is network-accessible and does not require authentication; provenance in the sources indicates potential for remote code executi...

9.8CVSS9.6AI score0.00729EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.3 views

PT-2022-27154 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a pre-authentication buffer overflow in the main function, which can be triggered via long post data. Recommendations: For TOTOLINK LR350 version 9.3.5u.6369 B20220309,...

9.8CVSS7.4AI score0.00729EPSS
Exploits1References5
OSV
OSV
added 2022/10/06 7:15 p.m.3 views

CVE-2022-41522

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function...

9.8CVSS5.8AI score0.00654EPSS
Exploits1References1
Prion
Prion
added 2022/10/06 7:15 p.m.15 views

Stack overflow

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function...

7.5CVSS9.7AI score0.00654EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2022/09/08 12:0 a.m.2 views

TOTOLINK A860R downloadfile.cgi Buffer Overflow Vulnerability

TOTOLINK A860R is a dual-band wireless router with a maximum transmission rate of 1200Mbps, 6-antenna dual-band concurrent technology, and support for remote management by mobile APP, which is suitable for small and medium-sized enterprises and home network environments. TOTOLINK A860R suffers fr...

9.8CVSS7.5AI score0.00513EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.3 views

TOTOLINK A860R 安全漏洞

TOTOLINK A860R is a dual-band wireless router with a maximum transmission rate of 1200Mbps, 6-antenna dual-band concurrent technology, and support for remote management by mobile APP, which is suitable for small and medium-sized enterprises and home network environments. TOTOLINK A860R suffers fr...

9.8CVSS7.4AI score0.00513EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/08/28 12:0 a.m.3 views

PT-2022-7699

Name of the Vulnerable Software and Affected Versions D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description The issue is related to the hnap main function of the D-Link GO-RT-AC750 router's firmware, which fails to neutralize special elements used in an...

10CVSS9.9AI score0.20233EPSS
Exploits1References16
Github Security Blog
Github Security Blog
added 2022/08/03 12:0 a.m.21 views

get-npm-package-version Command Injection vulnerability

The package get-npm-package-version before 1.0.7 is vulnerable to Command Injection via the main function in index.js...

9.8CVSS9.3AI score0.04267EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/03 12:0 a.m.3 views

PT-2022-4530 · D Link · D-Link Dir-818Lw

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-818LW version DIR818L FW105b01 Description: The issue is related to a remote code execution vulnerability via the ssdpcgi main function. This vulnerability is associated with coding errors in the firmware of D-LINK DIR-818LW router...

9.8CVSS6.5AI score0.06321EPSS
Exploits1References5
CNNVD
CNNVD
added 2022/08/02 12:0 a.m.2 views

get-npm-package-version 命令注入漏洞

get-npm-package-version is a package for hoperyy individual developers. It is used to get the npm package version. A command injection vulnerability exists in get-npm-package-version before 1.0.7, which is caused by command injection via the main function in index.js...

9.8CVSS8.3AI score0.04267EPSS
Exploits1References5
Rows per page
Query Builder