2867 matches found
PT-2023-10113 · Unknown · Vicamo Networkmanager
Name of the Vulnerable Software and Affected Versions: vicamo NetworkManager affected versions not specified Description: A problematic vulnerability has been found in vicamo NetworkManager. The issue affects the send arps function of the file src/devices/nm-device.c, leading to an unchecked retu...
Cross-site Scripting (XSS)
github.com/usememos/memos is vulnerable to stored cross-site scriptingXSS attacks. The vulnerability exists due to unchecked file uploads via the Resource endpoint, allowing an attacker to inject and execute malicious javascript...
Tenda A15 缓冲区错误漏洞
Tenda A15 is a WiFi extender from Tenda China. A stack overflow vulnerability exists in the Tenda A15 SYSPS parameter, which originates from a lack of length checking of input data in the SYSPS parameter of /goform/SysToolChangePwd, which can be exploited by an attacker to cause a denial of servi...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the loginname parameter of the dographauth sub4061E0 function, which can be exploited by an attacker to execute arbitrary...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that originates from the lack of size checking of input data in the qcawifi.wifi%dvap%d.maclist parameter in the kickbanwifimacdeny sub415D7C function, which can be exploited by an...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from the lack of size checking of input data in the comeo.comeo.netstatrsname parameter of the toolsnetstat sub41E730 function, which can be exploited by an attacker to...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from the lack of size checking of input data in the wpsstaenrolleepin parameter in the dostaenrolleewifi function, which can be exploited by an attacker to execute...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the sysservice parameter of the setupwizardmydlink sub4104B8 function, which can be exploited by an attacker to execute...
GHSA-P6FG-723F-HGPW shiyanhui/dht vulnerable to Uncontrolled Resource Consumption
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
CVE-2020-36562
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
CVE-2020-36562
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
Design/Logic Flaw
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
CVE-2020-36562 Uncontrolled Resource Consumption in github.com/shiyanhui/dht
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...
CVE-2020-36562
The CVE-2020-36562 entry concerns the Go library github.com/shiyanhui/dht. The vulnerability is caused by unchecked type assertions in handling incoming messages, which can cause panics and enable denial-of-service via remote or crafted messages. Veracode and Red Hat/other advisories corroborate ...
CVE-2022-44013
An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password in a Credential Object is not checked...
The vulnerability of the bpf_tail_call() function in the BPF subsystem of Linux’s operating systems allows a hacker to gain unauthorized access to data.
The vulnerability of the bpftailcall function in the BPF subsystem of Linux kernels involves copying buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to data...
The vulnerability of the xrdp_mm_chan_data_in() function on the XRDP server allows a hacker to execute arbitrary code.
The vulnerability of the xrdpmmchandatain function on the XRDP server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the devredir_proc_client_devlist_announce_req() function on the XRDP server allows a hacker to execute arbitrary code.
The vulnerability of the devredirprocclientdevlistannouncereq function on the XRDP server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
FFmpeg 代码问题漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg has a code issue vulnerability that stems from the vp3decodeframe function in its libavcodec/vp3.c file that does not reasonably check the return result of the avmalloc function, whi...
DEBIAN-CVE-2022-3114
An issue was discovered in the Linux kernel through 5.16-rc6. imxregisteruartclocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc and will cause the null pointer dereference...