Wei

Dataease هي أداة لتحليل وتصور البيانات. تسمح واجهة تحميل الموارد الثابتة بتحميل ملفات SVG. تتحقق عملية التحقق من الصحة في الخلفية فقط مما إذا كان ملف XML قابلاً للتحليل وما إذا كانت العقدة الجذرية هي svg، دون أن تقوم بتنقية المحتوى النشط مثل معالجات الأحداث `onload`/`onerror` أو السمات القابلة للتنفيذ. وهذا يسمح للمهاجم بتحميل ملف SVG ضار وتشغيل البرنامج النصي في المتصفح من خلال زيارة عنوان URL للمورد الثابت المعرض، مما يؤدي إلى سلسلة استغلال لـ «البرمجة النصية عبر المواقع» (XSS) المخزنة.

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: WINSTAR WN572HP3 الإصدار v230525 الوصف: تم اكتشاف ثغرة تتعلق بتجاوز سعة الـ«هيوب» (heap) عبر المتغير `CONTENT LENGTH` في نقطة نهاية واجهة برمجة التطبيقات (API) ”/cgi-bin/upload.cgi“. التوصيات: بالنسبة لـ WINSTAR WN572HP3 الإصدار v230525، يُنصح بتعطيل الوصول إلى نقطة نهاية واجهة برمجة التطبيقات (API) ”/cgi-bin/upload.cgi“ حتى يتوفر تصحيح لمنع استغلال ثغرة تجاوز سعة الذاكرة المؤقتة. تجنب استخدام المتغير `CONTENT LENGTH` في نقطة نهاية واجهة برمجة التطبيقات (API) المتأثرة حتى يتم حل المشكلة.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to a Lightweight Directory Access Protocol (LDAP) client remote code execution. It is caused by synchronization errors when using a shared resource. This allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The vulnerability allows remote attackers to execute arbitrary code and affect the system. It is related to errors in the implementation of the Kerberos Key Distribution Center (KDC) Proxy Protocol in Windows operating systems. The issue is due to the function KpsSocketRecvDataIoCompletion not checking large values of the Kerberos response length, leading to a 32-bit overflow and allowing attackers to execute malicious code without authentication. The vulnerability can be exploited by sending a forged Kerberos response, forcing the proxy to connect to a fake domain controller.

The issue exists due to insufficient input validation in the Windows Networking component, allowing a remote attacker to cause a denial of service. This can affect the system, potentially leading to service disruption.

The issue is related to a use-after-free vulnerability in the implementation of Network Address Translation (NAT) technology in Windows operating systems. This vulnerability can be exploited by a remote attacker to execute arbitrary code, potentially impacting the system.

The issue is related to a buffer overflow in the TCP/IP protocol implementation in Windows operating systems. This can be exploited by a remote attacker to execute arbitrary code, potentially leading to system compromise. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue is related to a buffer overflow in the TCP/IP protocol implementation in Windows operating systems. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability allows remote attackers to affect the system and execute arbitrary code.

توجد ثغرة تنفيذ عن بُعد للكود في تنفيذ TCP/IP لنظام Microsoft Windows. تنتج هذه الثغرة عن نقص في قيمة العدد الصحيح (integer underflow) في برنامج تشغيل النواة (kernel driver) المسؤول عن معالجة حزم IPv6. يمكن للمهاجم عن بُعد استغلال ذلك عن طريق إرسال حزم شبكة مصممة خصيصاً عبر بروتوكول IPv6، مما يسمح بتنفيذ كود عشوائي دون أي تفاعل من المستخدم. تم استغلال هذه الثغرة في هجمات واقعية، لا سيما في اختراق شركة تجزئة إسرائيلية حيث استخدم المهاجمون هذه الثغرة للوصول غير المصرح به وسرقة قاعدة بيانات بطاقات ائتمان تحتوي على 1.7 مليون سجل.

The issue is related to a denial-of-service vulnerability in the implementation of Network Address Translation (NAT) technology in the Windows operating system. This vulnerability is caused by a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service.

The issue is related to a denial-of-service vulnerability in the Windows Layer-2 Bridge Network Driver, which can be exploited by a remote attacker to cause a denial of service. The vulnerability is associated with pointer dereference errors. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to errors in pointer dereferencing, which can be exploited by a remote attacker to cause a denial of service. This can affect the system, potentially leading to a disruption in service.

The issue is related to errors in pointer dereferencing in the implementation of Network Address Translation (NAT) technology in Windows operating systems. This can be exploited by a remote attacker to cause a denial of service.

Name of the Vulnerable Software and Affected Versions: Windows Network Driver Interface Specification (NDIS) (affected versions not specified) Description: The issue is related to a denial-of-service vulnerability in the Windows Network Driver Interface Specification (NDIS). It is caused by a buffer overflow. An attacker, acting remotely, can exploit this issue to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to the implementation of the TCP/IP protocol in Windows operating systems and involves the use of an uninitialized pointer. Exploitation of this issue may allow a remote attacker to access confidential information. The vulnerability can be exploited by attackers to gain access to important information and impact the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver (affected versions not specified) Description: The issue is related to a denial of service vulnerability. It is caused by a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Xbox (affected versions not specified) Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted malicious link or file. This can allow the attacker to perform actions on the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver (affected versions not specified) Description: The issue is related to a denial-of-service vulnerability in the Windows Layer-2 Bridge Network Driver. It is caused by a buffer overflow in memory, which can be exploited by a remote attacker to cause a denial of service. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver (affected versions not specified) Description: The issue is related to insufficient input validation in the Windows Layer-2 Bridge Network Driver, which can be exploited by a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Layer-2 Bridge Network Driver (affected versions not specified) Description: The issue is related to a memory use after free condition in the Windows Layer-2 Bridge Network Driver. This can be exploited by remote attackers to execute arbitrary code on the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.