wolfSSL 安全漏洞

wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. WolfSSL suffers from an out-of-bounds read vulnerability that stems from the failure to check user input in the MatchDomainName function, which can be...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check the debugfsdir pointer before using it, resulting in a null pointer dereference when...

GO-2022-0389 Unchecked hostname resolution could allow access to local network resources by users outside the local network in github.com/pterodactyl/wings

Unchecked hostname resolution could allow access to local network resources by users outside the local network in github.com/pterodactyl/wings...

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formApPortalWebAuth function in the Tenda i22 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formApPortalWebAuth function in the Tenda i22 router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of AMI BIOS in Hewlett-Packard Development Company L.P.’s personal computers allows a perpetrator to execute arbitrary code.

The vulnerability of AMI BIOS in Hewlett-Packard Development Company L.P.’s personal computers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2024-6046 · Frrouting +5 · Frrouting +5

Name of the Vulnerable Software and Affected Versions: FRRouting versions through 10.1 Description: An issue was discovered in the bgp attr encap function in the bgpd/bgp attr.c file, which does not check the actual remaining stream length before taking the TLV value. This can allow a remote...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

CVE-2023-40067

Unchecked return value in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2023-40067

Unchecked return value in firmware for some IntelR CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

mozilla: Out of bounds read in editor component

The Mozilla Foundation Security Advisory describes this flaw as: Editor code failed to check an attribute value. This could have led to an out-of-bounds read...

PT-2024-7103 · Intel · Intel Csme

Name of the Vulnerable Software and Affected Versions: IntelR CSME affected versions not specified Description: The issue is related to an unchecked return value in the firmware of some Intel Converged Security and Manageability Engine CSME subsystems. This may allow an unauthenticated user with...

The vulnerability in the filter/load_text.c function of the GPAC multimedia platform allows a hacker to overflow memory buffers.

The vulnerability in the filter/loadtext.c function of the GPAC multimedia platform relates to the copying of buffers without checking the input size. Exploiting this vulnerability could allow an attacker to overflow memory buffers...

The vulnerability of the ReadClause() function in the Espeak speech synthesiser allows a perpetrator to trigger a service failure.

The vulnerability of the ReadClause function in the Espeak speech synthesiser lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `allocate_structures` function in the sysstat system performance monitoring and analysis tool allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the allocatestructures function in the sysstat system performance monitoring and analysis tool is related to insufficient checking of boundaries before arithmetic multiplication. This allows the buffer allocated for representing system actions to overflow. Exploiting this...

PT-2024-38397 · Trimble · Trimble Sketchup

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this issue, where the target mus...