PT-2024-7569

Name of the Vulnerable Software and Affected Versions PTZOptics PT30X-SDI/NDI-xx versions prior to 6.3.40 Description The issue is related to insufficient authentication in PTZOptics cameras. When requests are sent without an HTTP Authorization header to the /cgi-bin/param.cgi endpoint, the camer...

SourceCodester Sentiment Based Movie Rating System SQL注入漏洞

SourceCodester Sentiment Based Movie Rating System is an open source movie rating system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Sentiment Based Movie Rating System version 1.0, which originates from an unknown function in the user registration handler file...

PT-2024-32759

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A potential RCU dereference issue was identified in the wilc parse join bss param function, where the TSF field of the ies structure is accessed after the RCU read-side critical section is...

CVE-2024-5991

In function MatchDomainName, input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509checkhost takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do...

CVE-2024-5991

In function MatchDomainName, input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509checkhost takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do...

CVE-2024-5991

In function MatchDomainName, input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509checkhost takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do...

CVE-2023-6987

The String locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sql-column' parameter in all versions up to, and including, 2.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

CVE-2022-48921 sched/fair: Fix fault in reweight_entity

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweightentity Syzbot found a GPF in reweightentity. This has been bisected to commit 4ef0c5c6b5ba "kernel/sched: Fix schedfork access an invalid schedtaskgroup" There is a race between schedpostfork and...

OSV-2024-728 Negative-size-param in pdf_resize_resource_arrays

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70967 Crash type: Negative-size-param Crash state: pdfresizeresourcearrays processcmaptext pdftextprocess...

ghostscript:gs_device_pdfwrite_fuzzer: Negative-size-param in pdf_resize_resource_arrays

Detailed Report: https://oss-fuzz.com/testcase?key=5685434137509888 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: pdfresizeresourcearrays...

CVE-2024-33015

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report...

quickjs:fuzz_regexp: Negative-size-param in dbuf_put_self

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6745507395862528 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzregexp Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type:...

PT-2024-38124 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions 12.9 through 13.0 Description: A problematic issue has been found in some unknown functionality of the file "js/player/dmplayer/admin/post.php?act=setting". The manipulation of the yzm argument leads to cross site scripting. T...

Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0466)

The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...

CVE-2023-47856

A stack-based buffer overflow vulnerability exists in the boa setRadvdPrefixParam functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2024-13883 · Realtek · Realtek Rtl819X Jungle Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x Jungle SDK version 3.4.11 Description: Two stack-based buffer overflow vulnerabilities exist in the boa set RadvdInterfaceParam functionality. A specially crafted series of network requests can lead to remote code execution. A...

CVE-2024-32230

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideoenc.c:1216:21 in loadinputpicture in FFmpeg7.0...

DEBIAN-CVE-2024-32230

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideoenc.c:1216:21 in loadinputpicture in FFmpeg7.0...

CVE-2024-32230

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideoenc.c:1216:21 in loadinputpicture in FFmpeg7.0...

CVE-2024-23372

CVE-2024-23372 is a memory corruption issue described as occurring when invoking an IOCTL for GPU memory allocation with a size parameter larger than expected. Multiple sources identify it in Qualcomm components and related display subsystems, with a high-impact profile (local attack, low privile...