CVE-2024-52802

RIOT is an operating system for internet of things IoT devices. In version 2024.04 and prior, the function parseadvertise, located in /sys/net/applicationlayer/dhcpv6/client.c, has no minimum header length check for dhcpv6optt after processing dhcpv6msgt. This omission could lead to an out-of-bou...

RIOT 缓冲区错误漏洞

RIOT is RIOT's open source set of operating systems for applications in the Internet of Things IoT space. A buffer error vulnerability exists in RIOT 2024.04 and prior versions that stems from the lack of a minimum header length check, which could lead to remote reading and thus system...

PT-2024-27166 · Unknown · Aimeos-Core

Name of the Vulnerable Software and Affected Versions: aimeos-core version 2024.04 Description: An arbitrary file upload vulnerability in the image upload function allows attackers to execute arbitrary code via uploading a crafted PHP file. Recommendations: For version 2024.04, update to a versio...