All CVEs — page 251 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A buffer overflow vulnerability in IBM DataPower Gateway allows remote attackers to cause a denial of service by sending specially crafted input that exceeds allocated buffer space, potentially leading to application crashes or unavailability.
This flaw allows a remote attacker to cause memory corruption in IBM DataPower Gateway versions through 10.6.6 and 11.0.0.2, posing a significant security risk.
IBM DataPower Gateway suffers from an out-of-bounds read vulnerability that can lead to denial of service, allowing attackers to crash the system without requiring authentication or user interaction.
This flaw allows a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write, impacting IBM DataPower Gateway versions from 10.5.0.0 to 11.0.0.2.
A type confusion vulnerability in IBM DataPower Gateway allows attackers to trigger a denial of service by sending specially crafted requests that cause the system to misinterpret data types, potentially leading to system crashes or unresponsiveness.
A heap-based buffer overflow in IBM DataPower Gateway allows remote attackers to cause a denial of service by sending specially crafted input that exceeds allocated buffer boundaries, potentially leading to application crashes or unavailability.
IBM DataPower Gateway suffers from improper memoization of GraphQL fragment spreads, which can lead to denial of service when a remote attacker sends specially crafted GraphQL requests. This vulnerability allows an attacker to cause the system to consume excessive resources or crash, disrupting service availability.
A remote attacker can cause a denial of service by triggering an out-of-bounds memory access in IBM DataPower Gateway due to a strict-weak-ordering violation in sorting logic. This vulnerability allows an attacker to crash the gateway service, potentially disrupting network traffic and application connectivity.
A remote attacker can execute arbitrary code on IBM DataPower Gateway devices through an out-of-bounds write vulnerability in versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2. This allows for complete system compromise with high impact.
A buffer overflow vulnerability in IBM DataPower Gateway allows authenticated attackers to execute arbitrary code remotely, potentially leading to full system compromise. This affects multiple versions of the DataPower Gateway appliance.
The flaw allows a remote attacker to execute arbitrary code due to an out-of-bounds write, posing a critical risk.
The flaw is a buffer overflow in IBM DataPower Gateway versions 10.5.0.0 to 10.5.0.22, 10.6.1 to 10.6.6, 10.6.0.0 to 10.6.0.10, and 11.0.0.0 to 11.0.0.2, allowing local users to execute arbitrary code by overflowing a buffer.
This flaw allows unauthenticated users to inject arbitrary JavaScript code into the Web UI of IBM DataPower Gateway, potentially leading to credential theft.
A local authenticated user can exploit an uncontrolled search path element vulnerability in TightVNC Server to load a malicious DLL with SYSTEM privileges. This occurs because the application loads screenhooks32.dll/screenhooks64.dll without specifying search path flags, allowing attackers to place malicious DLLs in writable directories earlier in the search order.
A local authenticated user can manipulate IPC handles between TightVNC service and desktop server processes due to predictable shared memory names and NULL DACL permissions, potentially leading to privilege escalation or data disclosure.
A Cross-Site Request Forgery (CSRF) vulnerability exists in Melapress WP 2FA from version n/a through 4.1.0, allowing attackers to forge requests and potentially perform unauthorized actions on behalf of users.