CVE Vulnerability Catalog

Vulnerability in Sony XAV-9500ES device in l2_reassemble_sdu allows remote code execution via heap-based buffer overflow. Lack of length validation before copying data to a buffer. Requires pairing a malicious Bluetooth device.

A vulnerability in Sony XAV-9500ES devices allows physically present attackers to execute arbitrary code in the context of the gpsd daemon. The flaw is due to improper validation of NMEA data length before copying to a fixed-length buffer, leading to a buffer overflow. Authentication is not required.

Vulnerability in Sony XAV-9500ES device in handling of RTSP SETUP packets allows remote code execution via buffer overflow. Lack of length validation before copying data to a fixed-length buffer. Authentication is not required.

A vulnerability in Sony XAV-9500ES devices allows network-adjacent attackers to disclose sensitive information via an out-of-bounds read when handling Bluetooth L2CAP packets. The attacker must first pair a malicious Bluetooth device with the target system.

Vulnerability in Heimdall Data Database Proxy in the uploadJar method allows remote code execution via directory traversal. Lack of path validation before using it in file operations. Authentication is required.

The vulnerability in Kenwood DNR1007XR concerns incorrect default permissions on a directory used by the USB filesystem. An attacker with physical access and the ability to execute low-privileged code can escalate privileges and execute arbitrary code as root.

The vulnerability in Kenwood DNR1007XR in the startUpdateProcess method allows command injection. An attacker with physical access, without authentication, can exploit the lack of input validation to execute arbitrary code as root.

The vulnerability in the vCardParser class of Kenwood DNR1007XR leads to a heap-based buffer overflow. An attacker with physical access, without authentication, can exploit the lack of input validation to execute arbitrary code as root.

Vulnerability in Kenwood DNR1007XR in the udhcpd service is due to incorrect permissions set on a resource. A local attacker can exploit this flaw to escalate privileges and execute code in the context of root.

The vulnerability in the tchdr_bytestream_read function of Kenwood DNR1007XR causes an out-of-bounds write. An attacker with physical access, without authentication, can exploit the lack of data validation to execute arbitrary code as root.

Vulnerability in Kenwood DNR1007XR in the JKGenService is due to lack of proper validation of a user-supplied string before using it to execute a system call. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of root.

The vulnerability in the firmware update process of Kenwood DNR1007XR allows the use of symbolic links to move files to arbitrary locations. An attacker with physical access, without authentication, can execute arbitrary code as root.

OSNEXUS QuantaStor has a remote code execution vulnerability due to missing authentication in the configuration of Kapacitor. Authentication is not required to exploit this vulnerability.

Vulnerability in NoMachine in the getstat service is due to lack of proper validation of a user-supplied string before using it to execute a system call. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the service account.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Adminer in the multi_query method is due to an incorrect check of a function return value. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the web server.

Vulnerability in Hugging Face PyTorch Image Models during checkpoint parsing is due to lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. A remote attacker can exploit this flaw to execute code in the context of the current process, requiring user interaction.

Vulnerability in Parallels RAS Client in the RDP Backend Service is due to an exposed dangerous function. A local attacker can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in Comfast CF-N1-S version 2.6.0.1 in the sprintf function of the file /cgi-bin/mbox-config?method=SET&section=ptest_sn is due to command injection via the sn argument. A remote attacker can exploit this flaw to execute arbitrary system commands.