CWE:

	Topic	Date	Author
Med.	Easy File Sharing FTP Server 2.0 - Denied of Service (DoS)	14.01.2024	Fernando Mengali
Med.	MiniUPnP MiniUPnPc < 2.0 Remote Denial of Service	12.01.2018	tintinweb
Med.	Windows Kernel win32k.sys Integer Overflow (MS13-101)	12.12.2013	CORE
High	Apache 1.3.41 mod_proxy Integer overflow (code execution)	29.01.2010	Adam Zabrocki
Med.	Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability	11.12.2009	ZDI

---

CVEMAP Search Results

CVE

Details

Description

2024-04-26

CVE-2024-21905

Updating...

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTScloud c5.1.5.2651 and later

2024-04-11

CVE-2024-20795

Updating...

Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

2024-03-15

	CVE-2024-1917	Updating...	Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
	CVE-2024-1916	Updating...	Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.
	CVE-2024-0803	Updating...	Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet.

2024-03-14

CVE-2024-22396

Updating...

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.

2024-02-26

	CVE-2024-23605	Updating...	A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
	CVE-2024-23496	Updating...	A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
	CVE-2024-21836	Updating...	A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
	CVE-2024-21825	Updating...	A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

 

---

Copyright 2024, cxsecurity.com