CVE-2023-38080

Kofax Power PDF is affected by a PDF file parsing heap-based buffer overflow that leads to remote code execution. The flaw arises from insufficient validation of the length of user-supplied data before copying it into a fixed-size heap buffer, enabling code execution in the current process after ...

CVE-2023-35753

CVE-2023-35753 concerns D-Link DAP-2622. The DDP Set AG profile UUID component has a stack-based buffer overflow due to improper validation of user-supplied data length, enabling remote code execution with root privileges on routers. The vulnerability is exploitable by network-adjacent attackers ...

CVE-2023-32144

CVE-2023-32144 affects D-Link DAP-1360 devices (webproc /cgi-bin/webproc). The flaw is a stack-based buffer overflow in handling user-supplied data length, enabling remote code execution with root privileges when exploited by network-adjacent attackers. Public disclosures (ZDI-23-536, NVD entry) ...

Sante DICOM Viewer Pro 安全漏洞

Santesoft Sante DICOM Viewer Pro is a powerful viewer, anonymizer, converter and PACS client from Santesoft Cyprus. Works with DICOM files of all models and manufacturers. A security vulnerability exists in Sante DICOM Viewer Pro, which stems from a lack of proper validation of user-supplied data...

CVE-2024-23462

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

PT-2024-22941 · WordPress · Svs Pricing Tables

Name of the Vulnerable Software and Affected Versions: SVS Pricing Tables plugin for WordPress versions up to, and including, 1.0.4 Description: The issue is due to missing or incorrect nonce validation on the deletePricingTable function, making it possible for unauthenticated attackers to delete...

PT-2024-24191 · Infotel Conseil · Glpi

Name of the Vulnerable Software and Affected Versions: Infotel Conseil GLPI versions 10.X.X and after Description: The issue allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input. Recommendations: For Infotel Conseil GLPI versions 10.X.X and...

Tenda 4G300 sub_4260F0 function buffer overflow vulnerability

Tenda 4G300 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda 4G300 version 1.01.42, which originates from the parameter upfilen of the sub4260F0 function failing to correctly validate the length of the input data, and can be exploited by a remote attacker...

PT-2024-6394 · Artifex +6 · Artifex Ghostscript +6

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 10.03.1 Description: The issue is related to the incorrect input validation in the psi/zmisc1.c file of the Artifex Ghostscript software. This can allow a remote attacker to execute arbitrary code. The...

The vulnerability of the Offer LOV component of the Oracle Trade Management software, a business automation system within the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the “Offer LOV” component of the Oracle Trade Management software for managing trading operations within the Oracle E-Business Suite is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain...

Progress Software Telerik Reporting ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Telerik Reporting. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

Tenda AC10 Buffer Overflow Vulnerability

Tenda A18 is a dual-band Gigabit wireless router launched for 200M and above fiber users. A buffer overflow vulnerability exists in Tenda AC10, which stems from the adslPwd parameter of the formWanParameterSetting method failing to correctly validate the length size of the input data, no detailed...

CVE-2024-1132 Keycloak: path transversal in redirection validation

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects a...

PT-2024-3509 · Huawei · Huawei Matebook D16

Name of the Vulnerable Software and Affected Versions: Huawei Matebook D16 Model: CREM-WXX9, BIOS: v2.26 Description: The issue is related to insufficient validation of exceptional states in the UEFI BIOS firmware of Huawei personal computers. This can be exploited by a malicious OS attacker to...

PT-2024-3740 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product, part of...

PT-2024-4897 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Finance LOV versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

PT-2024-3742 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

PT-2024-3531 · Oracle · Peoplesoft Enterprise Hcm Benefits Administration

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Benefits Administration version 9.2 Description: The issue is related to insufficient input validation in the Benefits Administration component. It allows a low-privileged attacker with logon access to the...

ECShop SQL Injection Vulnerability (CNVD-2024-26111)

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall, source code free download experience, suitable for enterprise development and build mall. ECShop SQL injection vulnerability , the vulnerability stems from...

WordPress Plugin Premium Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...