2824 matches found
Dell PowerEdge Server BIOS 安全漏洞
Dell PowerEdge Server BIOS is a system update driver for the Dell Dell of the United States. The Dell PowerEdge Server BIOS is vulnerable to a buffer overflow vulnerability that originates from not checking the buffer input size, which can be exploited by an unauthorized attacker to write to memo...
The vulnerability of the software-hardware components of the fire safety systems Cerberus PRO EN and Sinteso EN lies in the copying to a buffer without checking the size of the input data. This allows an intruder to execute arbitrary code on the basic operating system with root privileges.
The vulnerability of the software-hardware components of the fire safety systems Cerberus PRO EN and Sinteso EN lies in the copying of input data into memory without checking its size. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the bas...
PT-2024-2625 · Unknown · Codeium-Chrome
Name of the Vulnerable Software and Affected Versions: codeium-chrome affected versions not specified Description: The issue is related to the lack of protection for service data in the codeium-chrome plugin. An attacker can exploit this to send arbitrary requests to the internal autocomplete...
Design/Logic Flaw
NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite loop. Unbound 1.18.0 introduced a feature that removes EDE records from responses with size higher than the client's...
The vulnerability in the /subsys/bluetooth/host/hci_core.c component of the real-time Bluetooth subsystem of the Zephyr operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in the /subsys/bluetooth/host/hcicore.c component of the real-time Bluetooth subsystem of the Zephyr operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
BIT-TENSORFLOW-2021-29544 CHECK-fail in `QuantizeAndDequantizeV4Grad`
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.QuantizeAndDequantizeV4Grad. This is because the implementation does not validate the rank of the input tensors. In turn, this results in the tensors...
The vulnerability of the MPLS traffic processor of the Cisco NX-OS operating system allows a attacker to trigger a service failure.
The vulnerability of the MPLS traffic processor of the Cisco NX-OS operating system is related to copying data into a buffer without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLSA-2024-1709563150 Fix CVE(s): CVE-2023-6004, CVE-2023-6918
SECURITY UPDATE: ProxyCommand/ProxyJump features allow injection of malicious code through hostname - debian/patches/CVE-2023-6004-pre1.patch: move common parser functions to configparser.c - debian/patches/CVE-2023-6004-pre2.patch: prevent possible segmentation fault -...
CLSA-2024-1709562468 Fix CVE(s): CVE-2023-6004, CVE-2023-6918
SECURITY UPDATE: ProxyCommand/ProxyJump features allow injection of malicious code through hostname - debian/patches/CVE-2023-6004-pre1.patch: move common parser functions to configparser.c - debian/patches/CVE-2023-6004-pre2.patch: prevent possible segmentation fault -...
CVE-2023-43540 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory corruption while processing the IOCTL FM HCI WRITE request...
CLSA-2024-1709547699 libssh: Fix of 2 CVEs
CVE-2023-6004: fix the possibility of injections through a hostname parameter in the ProxyCommand/ProxyJump features - CVE-2023-6918: fix the issue when unchecked return values for digests may cause DoS...
OESA-2024-1230 stb security update
Single-file public domain libraries for C/C++. Security Fixes: stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to...
SUSE CVE-2024-0075
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has not been checked. A successful exploit of this vulnerability may lead to denial of service and limited information...
Tenda AC9 fromSetSysTime function buffer overflow vulnerability
Tenda AC9 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in 2016. Tenda AC9 suffers from a buffer overflow vulnerability that stems from not checking the buffer input size, which can be exploited by an attacker to execute arbitrary code via the fromSetSysTime...
PT-2024-38409
Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...
Tenda AC9 安全漏洞
Tenda AC9 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in 2016. Tenda AC9 suffers from a buffer overflow vulnerability that stems from not checking the buffer input size, which can be exploited by an attacker to execute arbitrary code via the fromSetSysTime...
The vulnerability of the log_blackbox.c component in the libqb library allows a hacker to execute arbitrary code.
The vulnerability of the logblackbox.c component in the libqb library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Stack-based Buffer Overflow
libzephyr.so is vulnerable to a Buffer Overflow. The vulnerability is due to an unchecked length coming from user input in settings shell, specifically during the handling of SETTINGSVALUESTRING type values, which can result in copying data of a length greater than the buffer size allocated for...
