Axel Souchet

This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. The flaw exists within the implementation of the AddServer method, where specifying crafted arguments can cause invalid characters to be inserted into an XML configuration file, leading to a persistent denial-of-service condition. Authentication is required to exploit this vulnerability when the product is in its default configuration.

This issue allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is required to exploit this issue. The specific flaw exists within the `ImportCsv` method, where a crafted XML payload can cause a null pointer dereference, allowing an attacker to leverage this issue to create a denial-of-service condition on the system.

This issue allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. The specific flaw exists within the handling of NodeManagerOpcUa objects, resulting from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Authentication is required to exploit this vulnerability when the product is in its default configuration.

Esta vulnerabilidade permite que invasores na mesma rede executem código arbitrário em instalações afetadas dos roteadores TP-Link AC1750. Não é necessária autenticação para explorar esta vulnerabilidade. A falha específica existe no módulo `NetUSB.ko`, resultante da falta de validação adequada dos dados fornecidos pelo usuário, o que pode resultar em um estouro de inteiro antes da alocação de um buffer. Um invasor pode aproveitar esta vulnerabilidade para executar código no contexto de root.

O problema está relacionado a um erro de limite ao lidar com um número inesperado de extensões WebAuthN em um comando Register. Isso pode levar a uma gravação fora dos limites, resultando em corrupção de memória e uma falha potencialmente explorável. Um invasor poderia explorar isso criando uma página da Web especialmente criada, induzindo a vítima a abri-la e, em seguida, realizando uma gravação fora dos limites para executar código arbitrário no sistema.

A denial of service issue exists due to improper handling of objects in memory. This allows attackers to affect the system.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code via a specially crafted website, document, or email attachment. This could enable the attacker to take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system may be less impacted than those operating with administrative user rights.

The issue is related to an information disclosure problem in the Windows GDI component, where it improperly discloses the contents of its memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. The vulnerability enables attackers to obtain sensitive information and potentially affect the system.

The issue is related to an information disclosure problem where Windows Uniscribe improperly discloses the contents of its memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. The vulnerability enables attackers to obtain sensitive information and potentially affect the system.

The issue allows attackers to obtain sensitive information and affect the system. It is an information disclosure vulnerability that exists when Windows Uniscribe improperly discloses the contents of its memory, potentially allowing an attacker to obtain information to further compromise the user's system.

The issue allows attackers to obtain sensitive information and affect the system. It is an information disclosure vulnerability that exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the issue could obtain information to further compromise the user’s system.

The issue is related to the way Windows Uniscribe handles objects in memory, allowing a remote code execution. This could enable an attacker to take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights.

The issue is related to an information disclosure problem. It occurs when the Windows GDI component improperly discloses the contents of its memory. This could allow an attacker to obtain sensitive information, potentially further compromising the user's system.

The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote attackers can execute arbitrary code, affecting the system.

The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application. This is due to insufficient input validation in the Hyper-V application. An attacker can exploit this issue to execute arbitrary code on the host OS using a specially crafted application.

The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a JPEG file with a specific TIFFTAG JPEGTABLES length.

The issue is related to an out-of-bounds write on tiled images with odd tile width versus image width. This can lead to a heap-buffer-overflow.

The issue is related to an out-of-bounds read in the `readContigTilesIntoBuffer()` function.

The issue arises from a uint16 integer overflow in the readContigStripsIntoBuffer() function, located in tools/tiffcrop.c, causing the program to read an undefined buffer.

The issue is related to out-of-bounds write vulnerabilities in buffers within the tools/tiffcrop.c file of libtiff.