1454 matches found
PT-2024-23297 · Mintplex · Anything-Llm
Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: The issue is related to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. Attackers can exploit this by...
TOTOLINK EX200 安全漏洞
TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A denial of service vulnerability exists in the TOTOLINK EX200, which stems from a failure to...
Hikvision DS-7604NI-K1 安全漏洞
Hikvision DS-7604NI-K1 is a network video recorder from Hikvision China. A security vulnerability exists in Hikvision DS-7604NI-K1 V4.30.096 build221220 and earlier versions, which stems from insufficient validation of parameters in messages, and can be exploited by an attacker to send a speciall...
CVE-2024-27323
PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is not required to exploit this vulnerability. The...
Tenda AC10 安全漏洞
Tenda AC10U is a dual-band Gigabit router with 802.11ac Wave 2.0 standard, supporting MU-MIMO technology with high through-wall capability and stable transmission characteristics. The Tenda AC10U suffers from a buffer overflow vulnerability that originates from the deviceId, limitSpeed, limitSpee...
libreoffice: Insufficient macro permission validation leading to macro execution
An insufficient permission validation vulnerability was found in LibreOffice. In versions that support running commands in hyperlinks, an attacker can execute built-in macros without warning the user...
ROS-2-1767
2.1767 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...
BIT-TENSORFLOW-2020-15192 Memory leak in Tensorflow
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to dlpack.todlpack there is a memory leak following an expected validation failure. The issue occurs because the status argument during validation failures is not properly checked. Since each of the above methods ca...
BIT-MATTERMOST-2023-1774
When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to that channel, allowing an attacker to invite themselves to a private channel...
BIT-MATTERMOST-2023-3614
Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file...
PT-2024-2178
Name of the Vulnerable Software and Affected Versions Cisco AppDynamics Controller affected versions not specified Description A vulnerability in the file upload functionality could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This issue is...
Delta Electronics CNCSoft-B Stack Buffer Overflow Vulnerability
Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics Taiwan, China. A stack buffer overflow vulnerability exists in Delta Electronics CNCSoft-B, which can be exploited by an attacker to execute arbitrary code because the program fails to properly validate...
CVE-2024-20028
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687...
CVE-2024-20031
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541742...
OESA-2024-1215 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundati...
SUSE CVE-2023-6247
The PKCS7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing...
TP-LINK ER7206 wireguard VPN Command Injection Vulnerability
The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. The TP-LINK ER7206 wireguard VPN configuration suffers from an input validation vulnerability that can be exploited by a remote attacker to submit a special request that can be used in an application context to execute...
Improper Validation Of Array Index
github.com/greenpau/caddy-security is vulnerable to Improper Validation of Array Index. The vulnerability is due to improper checks when parsing a Caddyfile. Caddy-security fails to validate whether the input values are nil before attempting to access elements, which can lead to a panic index out...
CVE-2022-23088
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
VulnCheck KEV: CVE-2023-7311
BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoint. The path parameter is not properly validated and is echoed into a shell context, allowing an attacker to inject and execute arbitrary shell commands on the device. Successfu...