Pedro Ribeiro

تتعلق المشكلة بحدوث تدفق سفلي لعدد صحيح عند تطبيع عنوان URI باستخدام محلل Turtle في الدالة `raptor uri normalize path()`. تحدث هذه المشكلة في مكتبة Raptor RDF Syntax Library. لا توجد معلومات متوفرة حول العدد التقديري للأجهزة التي قد تكون متأثرة في جميع أنحاء العالم أو الحوادث الفعلية التي تم فيها استغلال هذه المشكلة.

تحدث مشكلة قراءة مفرطة للمخزن المؤقت (buffer) المستندة إلى الـ heap عند تحليل الثلاثيات باستخدام محلل nquads في الدالة `raptor ntriples parse term internal()`. تؤثر هذه المشكلة على مكتبة صيغة RDF Raptor.

A logic issue was addressed with improved checks. Processing web content may lead to arbitrary code execution. The issue is related to insufficient input validation in the WebKit browser's web page display modules. Exploitation of the issue may allow a remote attacker to execute arbitrary code.

This issue allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not required to exploit this issue. The specific flaw exists within the Password Reset Portal used by the GINA client, resulting from the lack of proper authentication of data received via HTTP. An attacker can leverage this issue to bypass authentication and execute code in the context of SYSTEM.

The issue concerns a nobody account with a blank password in Western Digital My Cloud devices.

This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the handling of APP files, specifically due to the process loading a library from an unsecured location. An attacker can leverage this to execute code in the context of the current process.

The issue allows for authentication bypass via a machine-in-the-middle attack. The administration interface is accessible via plaintext HTTP protocol by default, which facilitates the attack. An HTTP request may contain a session cookie that can be captured and used for authenticating to the server.

A denial-of-service condition can be created in the software by sending a crafted HTTP packet without a content-type header.

A denial-of-service condition can be created in the software by sending a crafted HTTP packet with a large `content-length` header. This issue affects the Softing Secure Integration Server.

A denial-of-service condition can be created in the software by sending a crafted HTTP packet with a -1 content-length header. This issue affects the Softing Secure Integration Server, allowing an attacker to potentially disrupt service.

The issue concerns the use of default administrator credentials, with the username as `admin` and the password as `admin`. This allows for direct login to the server to perform administrative functions without prompting the user to change the default password upon installation or first login. The process to change the password is complex and requires multiple steps.

The issue is related to a denial-of-service condition that can be triggered by a crafted HTTP packet with a missing HTTP URI. This can cause a NULL pointer dereference, leading to a denial-of-service condition.

The issue is related to an uncontrolled search path element that allows an attacker to execute arbitrary code by placing a malicious dll. This can lead to privilege escalation. Additionally, there is a vulnerability in the Dahua ASI7213X-T1 access control terminal software that allows bypassing the authentication procedure, enabling remote access to the device without a password.

The issue is caused by a stack-based buffer overflow in the SSL VPN module of the Cisco Small Business RV340, RV340W, RV345, and RV345P routers. This can be exploited by a remote attacker using a specially crafted HTTP request, allowing them to execute arbitrary code with root privileges. The vulnerability can also lead to elevation of privileges, execution of arbitrary commands, bypassing of authentication and authorization protections, fetching and running unsigned software, and denial of service (DoS).

This issue allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 wireless access points. Authentication is not required to exploit this issue. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this issue to execute code in the context of root.

This issue allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 routers. Authentication is not required to exploit this issue. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this issue to execute code in the context of root.

The issue allows REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation. This can potentially lead to the execution of arbitrary code by a remote attacker. The vulnerability is related to the implementation of the Western Digital MyCloud PR4100 network storage device's software interface, which is associated with unrestricted uploads of dangerous file types.

The issue is related to incorrect cryptographic signature verification in the Western Digital MyCloud PR4100 firmware. This could allow a remote attacker to execute arbitrary code. The problem arises because Western Digital My Cloud devices before OS5 do not use cryptographically signed firmware upgrade files.

This issue allows attackers with physical access to escalate privileges on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the SSH service, where the device can be booted into a special operation mode and hard-coded credentials are accepted for SSH authentication. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of root.

The issue is related to a heap-based buffer overflow in the composite frame() function of the GdkPixbuf library when handling GIF files. This overflow can be exploited to execute arbitrary code, particularly on 32-bit systems.