TRENDnet TEW-432BRP formSetRoute() Code Execution

The vulnerability of the formSetRoute function in TRENDnet TEW-432BRP software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

TRENDnet TEW-432BRP formSetDomainFilter Heap Buffer Overflow DoS

The vulnerability of the formSetDomainFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

TRENDnet TEW-432BRP formSetProtocolFilter Heap Buffer Overflow DoS

The vulnerability of the formSetProtocolFilter function in TRENDnet TEW-432BRP router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

TRENDnet TEW-432BRP formSetUrlFilter Code Execution

The vulnerability of the formSetUrlFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

TRENDnet TEW-432BRP formSetWlanEncrypt Heap Buffer Overflow DoS

The vulnerability of the formSetWlanEncrypt function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

Tenda W12 set_local_time_0() Code Execution

The vulnerability of the setlocaltime0 function in Tenda W12 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

Tenda W12 Router Code Execution

The vulnerability of the cgiWifiMacFilterSet function in the microprogramming-based router software of Tenda W12 lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

Tenda W12 Heap Buffer Overflow DoS

The vulnerability of the cgistaKickOff function in the Tenda W12 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Perl Programming Heap Buffer Overflow DoS

The vulnerability of the Perlstudychunk function in the Perl programming language is related to buffer overflows due to integer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

router EDIMAX BR-6478AC Command Execution

The vulnerability of the formWlbasic function in the microprogrammed routing switch EDIMAX BR-6478AC lies in the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

TRENDnet TEW-432BRP FormWlanSetup Code Execution

The vulnerability of the formWlanSetup function in TRENDnet TEW-432BRP router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Tenda W12 Router CGI SysWebTimeoutSet DoS

The vulnerability of the cgiSysWebTimeoutSet function in the Tenda W12 router’s microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

FreeRDP RDP Client Code Execution

The vulnerability of the cliprdrserverreceivepdu function in the RDP client FreeRDP is related to buffer overflows in dynamic memory during the processing of the capabilitySetLength parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service...

cpp-httplib ChunkedDecoder Buffer Overflow DoS

The vulnerability of the ChunkedDecoder::readpayload function in the cpp-httplib library is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

Framework Android Privilege Escalation

The vulnerability of the Framework component in Android operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

MilvusVectorStore doDelete Method

The vulnerability of the MilvusVectorStoredoDeleteList method in the Spring AI framework for model development involves the failure to take measures to neutralize special elements used in the expression language operator. Exploiting this vulnerability can allow an attacker to compromise the...

Android DevicePolicyManagerService DoS

The vulnerability of the DevicePolicyManagerService.java class in the Android operating system framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Android AccessibilityManagerService DoS

The vulnerability in the AccessibilityManagerService.java class of the Android operating system’s framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Framework startAnimation Disclosure

The vulnerability of the startAnimation method in the StageCoordinator.java class of the Framework component in Android operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

Android Framework addWindow Method Privilege Escalation

The vulnerability of the addWindow method in the WindowManagerService.java class of the Android operating system’s framework component is related to an improper limitation on the number of displayed user interface layers or frames. Exploiting this vulnerability could allow a malicious individual ...

Android Framework Load Privilege Escalation

The vulnerability of the Load method in the LoadLoadedArsc.cpp script of the Android operating system’s framework component is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Framework Component Privilege Escalation

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android Framework setGlobalProxy Privilege Escalation

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to increase their privileges...

WindowState.java Class Privilege Escalation

The vulnerability of the WindowState.java class in the Framework component of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android Framework createSessionInternal Privilege Escalation

The vulnerability of the createSessionInternal method in the PackageInstallerService.java class of the Android operating system’s framework is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow an attacker to increase their...

Letterbox.java Android Privilege Escalation

The vulnerability of the Letterbox.java class in the Android operating system’s framework component is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability can allow attackers to increase their privileges...

UBSAN Runtime Privilege Escalation

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to gain increased privileges...

UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

sdp_discovery.cc Android Code Execution

The vulnerability of the sdpdiscovery.cc script in Android operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Android bta_jv_rfcomm_connect Heap Buffer Overflow Privilege Escalation

The vulnerability of the btajvrfcommconnect function in the btajvact.cc scenario of Android operating systems is related to incorrect code generation. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android onCreate Privilege Escalation

The vulnerability of the onCreate method in the DisableSupervisionActivity.kt script on Android operating systems is related to an unvalidated return value, which leads to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

Thymeleaf SSTI

The vulnerability of the JavaScript-based Thymeleaf framework is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability can allow a remote attacker to execute a Server Side Template Injection SSTI attack...

OpenShift AI Insufficient Spatial Partitioning

The vulnerability of the OpenShift AI platform for developing artificial intelligence models is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

SonicOS DoS

The vulnerability of the SonicOS operating system is related to insufficient handling of format lines. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

libarchive Heap Buffer Overflow Info Disclosure

The vulnerability of the libarchive library relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

FlinkSessionJob Unauthorized Access

The vulnerability of the FlinkSessionJob component in the automation tool for deploying, managing, and scaling a distributed data processing platform called Apache Flink Kubernetes Operator is related to the use of files and directories accessible to external parties. Exploiting this vulnerabilit...

LXD doCertificateUpdate Privilege Escalation

The vulnerability of the doCertificateUpdate function in the LXD container management system is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Frappe Helpdesk get_dashboard_data() Data Compromise

The vulnerability of the getdashboarddata function in the Frappe Helpdesk customer support platform relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

Metinfo CMS Code Execution

The vulnerability of the wxAdminLogin function in the Metinfo CMS system is related to incorrect code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Mattermost Uncontrolled Resource Consumption DoS

The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption when processing TIFF files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SAP HANA Cockpit Database Explorer Data Compromise

The vulnerability of SAP HANA Cockpit and SAP HANA Database Explorer tools is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of the protected information...

Mattermost API Request Handler DoS

The vulnerability of the API request handler for Mattermost instant messaging applications is related to improper validation of the specified data type. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Mattermost DoS

The vulnerability of the Mattermost instant messaging application is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Poetry Path Traversal

The vulnerability of the Poetry dependency manager in the Python programming language is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Container SSRF

The vulnerability of the storage and content delivery tools for containers like Distribution is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...

TRENDnet TEW-432BRP Code Execution

The vulnerability of the formSetPassword function in TRENDnet TEW-432BRP router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

TRENDnet TEW-432BRP Code Execution

The vulnerability of the formSetEnableWizard function in TRENDnet TEW-432BRP router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

TRENDnet TEW-432BRP Form Port Code Execution

The vulnerability of the formPortFw function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...