397 matches found
CVE-2023-48194
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing setclientqos, control over the gp register can be obtained...
CVE-2023-48194: Out-of-bounds Write
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing setclientqos, control over the gp register can be obtained...
CVE-2023-48194
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing setclientqos, control over the gp register can be obtained...
CVE-2023-48194
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing setclientqos, control over the gp register can be obtained...
Tenda AC8 安全漏洞
Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. The Tenda AC8 suffers from an out-of-bounds write vulnerability that stems from the presence of an sscanf issue where the last...
CVE-2023-48194
CVE-2023-48194 affects Tenda AC8v4 firmware .V16.03.34.09. The vulnerability stems from an sscanf issue where the last digit of s8 can be overwritten with a null byte, enabling after set_client_qos a condition in which control over the gp register may be obtained. Connected sources corroborate th...
PT-2024-13555 · Tenda · Tenda Ac8V4
Name of the Vulnerable Software and Affected Versions: Tenda AC8v4 version .V16.03.34.09 Description: The issue arises due to the sscanf function and the last digit of s8 being overwritten with x0. After executing the set client qos function, control over the gp register can be obtained...
Malicious code in gp-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2432 Malicious code in gp-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gp-comps (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2431 Malicious code in gp-comps (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2430 Malicious code in gp-colors (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gp-colors (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gp-assets (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2429 Malicious code in gp-assets (npm)
--- -= Per source details. Do not edit below this line.=-...
AZL-47261 CVE-2024-38577 affecting package kernel for versions less than 5.15.167.1-1
In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix showrcutaskstracegpkthread buffer overflow There is a possibility of buffer overflow in showrcutaskstracegpkthread if counters, passed to sprintf are huge. Counter numbers, needed for this are unrealistically high,...
SUSE CVE-2024-36973
In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...
DEBIAN-CVE-2024-36973
In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...
UBUNTU-CVE-2024-36973
In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...
PT-2024-10388 · Palo Alto Networks · Palo Alto Networks Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect affected versions not specified Description: The issue is related to an insufficient certification validation in the GlobalProtect app, allowing attackers to connect the app to arbitrary servers. This can enab...