MSC-2023-17356

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2022-42433

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2022-42433

Summary: CVE-2022-42433 affects TP-Link TL-WR841N (US V14 220121) via the ated_tp service, where unsafely constructed user input is used in a system call, enabling network-adjacent attackers to execute code with root privileges. The Red Hat and CNNVD records corroborate the same description. The ...

CVE-2022-42433

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-17356

...

CVE-2017-17356

CVE-2017-17356 is rejected; this candidate number is not used and does not represent an active vulnerability.

CVE-2019-17356

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network...

CVE-2019-17356

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network...

CVE-2019-17356

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network...

CVE-2019-17356

The CVE-2019-17356 entry concerns the Infinite Design Android app (version 3.4.12). The vulnerability arises because the login process transmits a username and password over TCP without encryption, exposing credentials to eavesdropping on public networks. Impact is credential confidentiality risk...