The vulnerability of the cpStripToTile() function (tools/tiffcp.c) in the LibTIFF library, which is related to writing beyond the buffer boundaries in memory, allows a malicious actor to trigger a service failure.

The vulnerability of the cpStripToTile function tools/tiffcp.c in the LibTIFF library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

professional-strip-agentur.de Improper Access Control vulnerability OBB-3820170

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied

A flaw was found in modauthopenidc, an OpenID Certified™ authentication and authorization module for the Apache HTTP server. It is possible to trigger a NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied, leading to a segmentation fault and a denial of...

CVE-2023-45955

An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands...

CVE-2023-45955

An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands...

CVE-2023-45955

An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands...

Command injection

An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands...

PT-2023-29772 · Nanoleaf · Nanoleaf Light Strip

Name of the Vulnerable Software and Affected Versions: Nanoleaf Light strip version 3.5.10 Description: An issue discovered in the Nanoleaf Light strip allows attackers to cause a denial of service via crafted write binding attribute commands. Recommendations: For version 3.5.10, consider disabli...

CVE-2023-45955

CVE-2023-45955 affects Nanoleaf Light strip v3.5.10, enabling a network-denial of service via crafted write binding attribute commands. Root cause specifics are not fully disclosed in the provided documents. PT-2023-29772 recommends temporarily disabling write binding attribute commands as a work...

Nanoleaf Light strip security vulnerability

Nanoleaf Light strip is a smart LED strip from Nanoleaf. A security vulnerability exists in Nanoleaf Light strip version v3.5.10 that could allow an attacker to send a malicious message and cause a denial of service...

CVE-2023-45955

An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands...

CVE-2023-45955

An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands...

CVE-2023-45956

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands...

CVE-2023-45956

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands...

CVE-2023-45956

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands...

Command injection

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands...

CVE-2023-45956

CVE-2023-45956 affects Govee LED Strip v3.00.42. The vulnerability allows an attacker to trigger a Denial of Service by issuing crafted Move and MoveWithOnoff commands over the network (no authentication required; low attack complexity). The CVSS v3.1 base score is 7.5 (HIGH), with Availability i...

PT-2023-29773 · Govee · Govee Led Strip

Name of the Vulnerable Software and Affected Versions: Govee LED Strip version 3.00.42 Description: An issue in Govee LED Strip allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands. Recommendations: For Govee LED Strip version 3.00.42, consider disabling the...

Govee LED Strip Security Vulnerability

Govee LED Strip is an indoor LED strip from Govee. A security vulnerability exists in Govee LED Strip version v3.00.42, which stems from a vulnerability that allows an attacker to cause a denial of service via the crafted Move and MoveWithOnoff commands...

CVE-2023-45956

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands...