Medium: libX11

Issue Overview: A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array...

The vulnerability of the software for configuring and managing Accutech Manager lies in the copying of buffers without checking the size of the input data. This allows a malicious individual to exploit their privileges.

The vulnerability of the software for configuring and managing Accutech Manager lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...

Schneider Electric Accutech Manager Buffer Overflow Vulnerability (CNVD-2023-85391)

Schneider Electric Accutech Manager is an easy-to-use interface from Schneider Electric, France, that provides field device and basic radio performance data. A buffer overflow vulnerability exists in Schneider Electric Accutech Manager version 2.7 and prior versions, which stems from an unchecked...

PT-2023-5451 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

IBM DB2 Code Execution Vulnerability (CNVD-2023-58518)

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a code execution vulnerability that originates from an unchecked logger...

Schneider Electric Accutech Manager 安全漏洞

Schneider Electric Accutech Manager is an easy-to-use interface from Schneider Electric, France, that provides field device and basic radio performance data. A buffer overflow vulnerability exists in Schneider Electric Accutech Manager version 2.7 and prior versions, which stems from an unchecked...

Design/Logic Flaw

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

IBM DB2 代码注入漏洞

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A code execution vulnerability exists in IBM DB2 that stems from unchecked class instantiation. An...

OESA-2023-1398 snappy-java security update

A Java port of the snappy, a fast compresser/decompresser written in C++. Security Fixes: snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error. The function...

GHSA-4HPJ-8RHV-9X87 Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module

Impact The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is exposed by all portal software built on top of Products.CMFCore, such as Plone. All...

User can manipulate totalRewardUnclaimed and steal pool incentives

Lines of code Vulnerability details Impact In the UniswapV3Staker.sol contract, a user can drain the incentives by repeatedly staking and unstaking. Proof of Concept During staking, the stakeToken... function checks that incentives is not zero this would later become insufficient but does not in...

CVE-2023-36814 zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module

Products.CMFCore are the key framework services for the Zope Content Management Framework CMF. The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is...

CVE-2023-36814 zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module

Products.CMFCore are the key framework services for the Zope Content Management Framework CMF. The use of Python's marshal module to handle unchecked input in a public method on PortalFolder objects can lead to an unauthenticated denial of service and crash situation. The code in question is...

Zope Products.CMFCore 安全漏洞

Products.CMFCore is a key framework service for the Zope Content Management Framework CMF. A security vulnerability exists in Zope Products.CMFCore versions prior to 3.2, which stems from the presence of unchecked input and could lead to an unauthenticated denial of service and crash...

AZL-27347 CVE-2023-3359 affecting package kernel for versions less than 5.15.118.1-2

An issue was discovered in the Linux kernel brcmnvramparse in drivers/nvmem/brcmnvram.c. Lacks for the check of the return value of kzalloc can cause the NULL Pointer Dereference...

Memory corruption

A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust...

CVE-2023-3405

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

Denial of service

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

CVE-2023-3405 Denial of service condition in M-Files Server

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...

CVE-2023-3405 Denial of service condition in M-Files Server

Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 excluding 23.2 SR2 and newer allows anonymous user to cause denial of service...