CVE-2011-10027: Stack-based Buffer Overflow

AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embedding an overly long string in a hyperlink tag, an attacker can trigger a stack-based buffer overflow due to the use of unsafe strcpy operations. This allows remote attackers to...

CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2019-13921

A vulnerability has been identified in SIMATIC WinAC RTX F 2010 All versions SP3 Update 1. Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is...

SUSE CVE-2022-49372

In the Linux kernel, the following vulnerability has been resolved: tcp: tcprtxsynack can be called from process context Laurent reported the enclosed report 1 This bug triggers with following coditions: 0 Kernel built with CONFIGDEBUGPREEMPT=y 1 A new passive FastOpen TCP socket is created. This...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tcprtxsynack function that may be called in a process environment, resulting in a statistic function err...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking for the presence of any unacknowledged data in the RTX queue...

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors allows a hacker to trigger a service failure.

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors is related to pointer dereferencing errors. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors’ microprogramming software is related to an uncontrollable element in the search process, allowing attackers to exploit their privileges.

The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors’ microprogramming software is related to an uncontrollable element in the update process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-31457

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

Directory traversal

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

CVE-2022-31458

RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...

CVE-2022-31458

RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...

CVE-2022-31457

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

CVE-2022-31458

RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...

CVE-2022-31458

RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...

CVE-2022-31457

The CVE-2022-31457 entry concerns RTX TRAP v1.0, where a directory traversal is possible via crafted requests to the /data/ endpoint. The vulnerability’s CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, and no privileges required, and it mainly impacts confide...

CVE-2022-31457

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

PT-2023-13041 · Rtx Trap · Rtx Trap

Name of the Vulnerable Software and Affected Versions: RTX TRAP version 1.0 Description: The issue is related to host header poisoning. Recommendations: For RTX TRAP version 1.0, consider restricting access to vulnerable endpoints to minimize the risk of exploitation. At the moment, there is no...

CVE-2022-31458

CVE-2022-31458 affects RTX TRAP v1.0, with a host header poisoning vulnerability. Exploitation involves manipulating the HTTP Host header to spoof the server and cause it to process requests under a malicious hostname. Reported data from NVD cites a network attack vector with low-moderate impact ...

Multiple Siemens Products Cross-Site Request Forgery Vulnerability

SIMATIC Drive Controllers are designed for the automation of production machines, combining the functionality of SIMATIC S7-1500 CPUs and SINAMICS S120 Drive Controllers.SIMATIC PC Station is a software component that manages the interface between SIMATIC software products and the PC. SIMATIC...