H3C Magic NX18 Plus buffer error vulnerability

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the edditactionlist method...

H3C GR-1200W Buffer Error Vulnerability

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the UpdateWanLinkspyMulti method...

H3C H200 Buffer Error Vulnerability

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the AddMacList method...

H3C H200 Buffer Error Vulnerability

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the UpdateSnat method...

H3C B5 Mini buffer error vulnerability

The H3C B5 Mini is a full gigabit wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C B5 Mini B5MiniV100R005 version that stems from a stack overflow in the WlanWpsSet method...

H3C Magic NX18 Plus buffer error vulnerability

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the UpdateSnat method...

H3C H200 Buffer Error Vulnerability

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the EditBasicSSID method...

H3C GR-1200W Buffer Error Vulnerability

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the UpdateSnat method...

H3C GR-1200W Buffer Error Vulnerability

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the UpdateOne2One method...

H3C GR-1200W Buffer Error Vulnerability

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the edditactionlist method...

TOTOLINK A7000R Buffer Error Vulnerability

The TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A7000R version V9.1.0u.6115B20201022, which stems from a stack overflow in the sPort parameter of the addEffect method...

H3C GR-1200W Buffer Error Vulnerability

The H3C GR-1200W is a Gigabit Enterprise Wireless Router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the addactionlist method...

CVE-2022-38078: Improper Control of Generation of Code

Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and...

PT-2022-9135 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue arises from the method PVRSRVBridgeTLDiscoverStreams, which allocates a buffer on the heap and fills it via TLServerDiscoverStreamsKM. If TLServerDiscoverStreamsKM fails due t...

PT-2022-16658 · Asneg · Opcuastack

Name of the Vulnerable Software and Affected Versions: asneg/opcuastack versions affected versions not specified Description: The issue is related to a Denial of Service DoS due to a missing limitation on the number of received chunks per single session or in total for all concurrent sessions. An...

CVE-2022-34773

Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an example of OWASP:API8 – Injection...

CVE-2022-34773

Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an example of OWASP:API8 – Injection...

Design/Logic Flaw

Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an example of OWASP:API8 – Injection...

CVE-2022-34773 Tabit - HTTP Method manipulation

Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This is an example of OWASP:API8 – Injection...

CVE-2022-34773

CVE-2022-34773 affects Tabit: HTTP Method manipulation via the endpoint https://bridge.tabit.cloud/configuration/addresses-query. The linked records describe that a POST to this URL can add addresses to the database, classed as OWASP API8 – Injection, indicating input/output handling weaknesses a...