Axel Souchet

This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. The flaw exists within the implementation of the AddServer method, where specifying crafted arguments can cause invalid characters to be inserted into an XML configuration file, leading to a persistent denial-of-service condition. Authentication is required to exploit this vulnerability when the product is in its default configuration.

This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this issue. The specific flaw exists within the `ImportCsv` method, where a crafted XML payload can cause a null pointer dereference, allowing an attacker to leverage this issue to create a denial-of-service condition on the system.

This issue allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. The specific flaw exists within the handling of NodeManagerOpcUa objects, resulting from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Authentication is required to exploit this vulnerability when the product is in its default configuration.

This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 routers. Authentication is not required to exploit this issue. The specific flaw exists within the `NetUSB.ko` module, resulting from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this issue to execute code in the context of root.

The issue is related to a boundary error when handling an unexpected number of WebAuthN Extensions in a Register command. This can lead to an out of bounds write, resulting in memory corruption and a potentially exploitable crash. An attacker could exploit this by creating a specially crafted web page, tricking the victim into opening it, and then performing an out of bounds write to execute arbitrary code in the system.

A denial of service issue exists due to improper handling of objects in memory. This allows attackers to affect the system.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code via a specially crafted website, document, or email attachment. This could enable the attacker to take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system may be less impacted than those operating with administrative user rights.

The issue is related to an information disclosure problem in the Windows GDI component, where it improperly discloses the contents of its memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. The vulnerability enables attackers to obtain sensitive information and potentially affect the system.

The issue is related to an information disclosure problem where Windows Uniscribe improperly discloses the contents of its memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. The vulnerability enables attackers to obtain sensitive information and potentially affect the system.

The issue allows attackers to obtain sensitive information and affect the system. It is an information disclosure vulnerability that exists when Windows Uniscribe improperly discloses the contents of its memory, potentially allowing an attacker to obtain information to further compromise the user's system.

The issue allows attackers to obtain sensitive information and affect the system. It is an information disclosure vulnerability that exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the issue could obtain information to further compromise the user’s system.

The issue is related to the way Windows Uniscribe handles objects in memory, allowing a remote code execution. This could enable an attacker to take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights.

The issue is related to an information disclosure problem. It occurs when the Windows GDI component improperly discloses the contents of its memory. This could allow an attacker to obtain sensitive information, potentially further compromising the user's system.

The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote attackers can execute arbitrary code, affecting the system.

The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application. This is due to insufficient input validation in the Hyper-V application. An attacker can exploit this issue to execute arbitrary code on the host OS using a specially crafted application.

The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a JPEG file with a specific TIFFTAG JPEGTABLES length.

The issue is related to an out-of-bounds write on tiled images with odd tile width versus image width. This can lead to a heap-buffer-overflow.

The issue is related to an out-of-bounds read in the `readContigTilesIntoBuffer()` function.

The issue arises from a uint16 integer overflow in the readContigStripsIntoBuffer() function, located in tools/tiffcrop.c, causing the program to read an undefined buffer.

The issue is related to out-of-bounds write vulnerabilities in buffers within the tools/tiffcrop.c file of libtiff.