Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a…
Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more information.
Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a…
Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a denial-of-service (DoS) via a crafted packet. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical…
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability.
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based…
DSA-6612-1 symfony - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
DSA-6611-1 imagemagick - security update
ImageMagick: Mehrere Schwachstellen
DSA-6611-1 imagemagick - security update
DSA-6607-1 apt - security update
On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges. The vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the…