CVE Vulnerability Catalog

The Tenda O3 Wireless Router v1.0.0.5(4180) contains a stack overflow in the ip parameter of the fromNetToolGet function. An attacker can exploit this vulnerability by sending an HTTP request, leading to a Denial of Service (DoS).

Tenda O3 Wireless Router v1.0.0.5(4180) has a stack overflow in the domain parameter of the fromNetToolGet function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.

Tenda O3 Wireless Router v1.0.0.5(4180) has multiple stack overflows in the fromVirtualSer function via parameters puVar2, puVar1, __s2, __s1_00, and puVar3. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.

The Tenda W3 Wireless Router v1.0.0.3(2204) contains a stack overflow in the wl_radio parameter of the formwrlSSIDset function. An attacker can exploit this vulnerability by sending crafted input, leading to a Denial of Service (DoS).

The Tenda US_W3V1.0BR router v1.0.0.3 contains a stack overflow in the Go parameter of the ask_to_reboot function. An attacker can exploit this vulnerability by sending crafted input, leading to a Denial of Service (DoS).

An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3. Authenticated attackers can move files from temporary storage to arbitrary locations, enabling access to sensitive files, overwriting critical files, and remote code execution.

Insecure permissions in bookcars v8.3 allow authenticated attackers to escalate privileges from user to admin by modifying their user type.

An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated attackers to obtain sensitive information, including SHA256 password hashes, by enumerating user IDs.

Vulnerability in GPAC MP4Box v2.4: NULL pointer dereference in gf_odf_vvc_cfg_write_bs function (odf/descriptors.c). An attacker can cause a Denial of Service (DoS) by supplying a crafted MP4 file.

Vulnerability in GPAC MP4Box v2.4: segmentation violation in gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c). An attacker can cause a Denial of Service (DoS) by supplying crafted HEVC SPS data.

Stack buffer overflow vulnerability in the filein_process function (in_file.c) of GPAC MP4Box v2.4. An attacker can cause a Denial of Service (DoS) by supplying a crafted MP4 file.

A heap buffer overflow exists in various buffer encryption utilities in Malwarebytes 4.x and 5.x (and Nebula from 2020-10-21 onward).

In Malwarebytes EDR 1.0.11 on Linux, utility functions for calculating cryptographic hashes truncate data exceeding 4GB, causing an integer wrap-around. An attacker can create a hash collision for two different strings by appending 4GB of data to a shorter string.

SQL Injection vulnerability in LimeSurvey RemoteControl API methods (invite_participants and remind_participants). An attacker with tokens/update permission can inject SQL via unsanitized input. With RPCInterface enabled and emulated prepared statements, attacker can read admin password hashes and other data, and modify the database.

LimeSurvey constructs password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist is undefined in the default configuration, so LSHttpRequest::checkIsAllowedHost() results in no operation. A remote, unauthenticated attacker who submits a forgotten-password request for a known account with a spoofed Host header causes LimeSurvey to email a reset link with an attacker-controlled hostname while embedding the genuine validation_key. When the recipient or an automated inbound mail-security link scanner dereferences the link, the valid reset token is disclosed to the attacker, who replays it against the legitimate host's newPassword endpoint to set a new password and take over the account.

Missing authentication for a critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Microsoft PC Manager has an improper link resolution before file access ('link following') vulnerability, allowing an authorized attacker to elevate privileges locally.

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).

Adobe InCopy versions 21.3, 20.5.3 and earlier are affected by a stack-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user.

Heap-based buffer overflow vulnerability in InCopy versions 21.3, 20.5.3 and earlier. Could lead to arbitrary code execution in the context of the current user after opening a malicious file.