Lucene search
+L

2794 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.14 views

The vulnerability of the CloudACMunualUpdate() function in the microprogrammed software routers of TOTOLINK T10, TOTOLINK A3100R, TOTOLINK A950RG, TOTOLINK A800R, TOTOLINK N600R, TOTOLINK A3000RU, and TOTOLINK A810R allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CloudACMunualUpdate function in the microprogrammed routing software devices TOTOLink T10, TOTOLINK A3100R, TOTOLINK A950RG, TOTOLINK A800R, TOTOLINK N600R, TOTOLINK A3000RU, and TOTOLINK A810R lies in the copying of buffers without checking the size of the input data...

9CVSS7.6AI score0.01131EPSS
SaveExploits0References4Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.22 views

The vulnerability of the dc_dmub_srv_cmd_run_list() function in the DRI driver for AMD graphics cards with Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the dcdmubsrvcmdrunlist function in the DRI driver for AMD graphics cards with Linux operating systems is related to the lack of checking the return value. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00194EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.10 views

The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers allows a perpetrator to execute arbitrary code.

The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...

9CVSS8AI score0.00792EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.26 views

The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

9CVSS7.6AI score0.00792EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.12 views

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formWlanRedirect file in the microprogramming system for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formWlanRedirect file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

9CVSS7.7AI score0.00793EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.14 views

The vulnerability of the /goform/UserCongratulationsExec file in the Tenda AC10 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the /goform/UserCongratulationsExec microprogramming system for Tenda AC10 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS8AI score0.00818EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.13 views

The vulnerability of the HTTP POST Request Handler component, sub_40BE30, in the microprogramming software of the A702R, A3002R, and A3002RU routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component, sub40BE30 in the microprogramming software of the A702R, A3002R, and A3002RU routers, involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

9CVSS7.7AI score0.00792EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.15 views

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formNtp file in the microprogramming software for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formNtp file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker ...

9CVSS7.7AI score0.00793EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.13 views

The vulnerability of the /goform/openSchedWifi component in the microprogramming software for Tenda TX3, which stems from copying buffers without checking the size of the input data, allows attackers to compromise the accessibility of protected information.

The vulnerability of the /goform/openSchedWifi component in the microprogramming-based routing software Tenda TX3 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected...

6.8CVSS6.6AI score0.00821EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.19 views

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software allows a attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetNetControlList component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

7.8CVSS6.6AI score0.01173EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 11:15 p.m.10 views

CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types...

7.5CVSS7.4AI score0.00753EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:11 p.m.9 views

CVE-2022-39063

When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...

7.5CVSS6.9AI score0.01142EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:23 p.m.6 views

CVE-2021-29567

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.SparseDenseCwiseMul, an attacker can trigger denial of service via CHECK-fails or accesses to outside the bounds of heap allocated data. Since the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:42 p.m.7 views

CVE-2021-0114

Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

7.2CVSS7AI score0.00267EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:20 p.m.12 views

CVE-2021-21814

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strlen to determine the ending location of the char passed in by the user, no checks are done to see if the passed in char is longer th...

7.8CVSS7.3AI score0.00344EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/22 6:15 p.m.13 views

CVE-2024-13930

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

5.9CVSS0.0035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/22 5:55 p.m.8 views

CVE-2024-13930 Authenticated Unchecked Loop Condition

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

5.9CVSS5.1AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/22 5:55 p.m.20 views

CVE-2024-13930 Authenticated Unchecked Loop Condition

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

5.9CVSS0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/22 5:55 p.m.49 views

CVE-2024-13930

CVE-2024-13930 describes an unchecked loop condition in ABB ASPECT product line, enabling an attacker to cause resource exhaustion when session administrator credentials are compromised. Affected products/versions: ASPECT-Enterprise up to 3.08.03; NEXUS Series up to 3.08.03; MATRIX Series up to 3...

5.9CVSS5.2AI score0.0035EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 p.m.10 views

CVE-2020-11115

u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

7.5CVSS7.6AI score0.00663EPSS
SaveExploits0References1
Rows per page
Query Builder