90 matches found
CVE-2022-38873
D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-366...
Design/Logic Flaw
D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-366...
CVE-2022-38873
CVE-2022-38873 affects multiple D-Link DAP devices (2310, 2330, 2360, 2553, 2660, 2690, 2695, 3320, 3662). The root cause is a vulnerability that allows a Denial of Service when an attacker uploads a crafted firmware after modifying the firmware header. Impact reported as DoS with high severity C...
SUSE: Security Advisory (SUSE-SU-2021:3662-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3662
creationtimestamp| type| source ---|---|--- 2021-10-29 16:18:10+00:00| seen| https://t.me/cibsecurity/31453...
CVE-2021-3662
Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...
CVE-2021-3662
CVE-2021-3662 affects HP Enterprise LaserJet and PageWide MFPs, with a stored cross-site scripting (XSS) vulnerability in printer software. The issue arises from insufficient input filtering/escaping, enabling user-supplied data to be stored and potentially executed in a privileged context. Publi...
CVE-2021-3662
Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS...
Null pointer dereference
Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b, DAP-2690 3.20RC115 BETA, DAP-2695 1.20RC093, DAP-3320 1.05RC027 BETA and DAP-3662 1.05rc069 in the sbin/httpd binary. The crash happens a...
CVE-2021-28840
CVE-2021-28840 targets multiple D-Link DAP access points (DAP-2310, -2330, -2360, -2553, -2660, -2690, -2695, -3320, -3662). The root cause is a NULL pointer dereference in the upload_config function of sbin/httpd: when handling a specific HTTP GET, upload_file is NULL and strncasecmp is called w...
CVE-2021-28839
Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the uploadcertificate function of sbin/httpd...
(0Day) D-Link DAP-3662 httpd Authentication Bypass Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-3662 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the httpd web server. A crafted HTTP...
CentOS 8 : php:7.3 (CESA-2020:3662)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3662 advisory. - php: Out-of-bounds read due to integer overflow in iconvmimedecodeheaders CVE-2019-11039 - php: Buffer over-read in exifreaddata CVE-2019-11040 - php...
Oracle Linux 8 : php:7.3 (ELSA-2020-3662)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3662 advisory. php 7.3.20-1 - update to 7.3.20 1856655 php-pear 1:1.10.9-1 - update PEAR to 1.10.9 - update ArchiveTar to 1.4.7 - update ConsoleGetopt to 1.4.2 Tenabl...
CVE-2020-3662
CVE-2020-3662 describes a buffer overflow that can occur when parsing the eac3 header while playing a clip on Snapdragon platforms (including Snapdragon Auto/Compute/Connectivity/IoT/Mobile families). The underlying issue is a parsing buffer overflow in nonstandard eac3 header handling across a w...
CVE-2020-3662
Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ801...
CVE-2019-3662 Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability
Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests...
CVE-2019-3662
CVE-2019-3662 affects McAfee Advanced Threat Defense (ATD) prior to 4.8. The vulnerability is a path traversal in which a crafted HTTP request allows a remote authenticated attacker to access files outside a restricted directory due to improper filtering of path elements. Reported impact indicate...
