All CVEs — page 1109 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The vulnerability is an out-of-bounds read in flatcc's schema lexer that occurs when processing FlatBuffers schemas ending with an unterminated quotation mark. This flaw can lead to heap buffer over-reads, causing application crashes and denial of service.
A buffer over-read vulnerability in flatcc's schema lexer allows attackers to read past the end of input buffers when processing FlatBuffers schemas that end with digits, potentially leading to application crashes and denial of service.
YARA 4.5.8 contains a memory corruption vulnerability in its compiled rule file deserialization process, where invalid pointer releases can occur during rule destruction or object creation, potentially leading to application crashes or memory corruption when processing specially crafted .yrc files.
The lwIP TCP/IP Stack MQTT implementation is vulnerable to an out-of-bounds write, enabling full code execution on the device. This flaw is critical as it allows attackers to gain control over the device.
The flaw allows unauthenticated WebSocket clients to send oversized frame headers that trigger memory allocation panics or excessive memory consumption in SIPGO's WebSocket transport layer. This can lead to denial of service or memory exhaustion on the server.
The Analytics and Location Engine component in Aruba Networks improperly handles incoming socket connections, allowing unauthenticated remote attackers to inject unauthorized data during the connection process. This represents a significant security gap that could enable data manipulation without requiring authentication or user interaction.
The Analytics and Location Engine management interface has a vulnerability that allows unauthenticated remote attackers to disclose sensitive information about site hierarchy, infrastructure, and client devices. This represents a significant information disclosure risk as attackers can gain insights into network infrastructure without needing credentials.
The vulnerability allows unauthenticated remote attackers to gain unauthorized write access to the file system with elevated privileges, potentially leading to a full system compromise.
The flaw involves default, hard-coded credentials in the Analytics and Location Engine (ALE), allowing unauthenticated attackers to gain unauthorized access to the application and underlying system.
Kaneo versions 2.3.12 before 2.12.2 allow authenticated users with viewer or member roles to delete and modify tasks beyond their permissions by exploiting the bulk task endpoint, leading to unauthorized changes or deletions.