15 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-37315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser. CVE-2022-37315 Note that Nessus relies on the presence of the...
MAL-2025-37315 Malicious code in turbograft (npm)
The package turbograft was found to contain malicious code...
CVE-2021-37315
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations...
SUSE CVE-2024-37315
Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the filesversions app is enabled. It is recommended that the Nextcloud Server is upgraded to 26.0.12, 27.1.7 or 28.0.3 and that the Nextcloud...
CVE-2024-37315
CVE-2024-37315 affects Nextcloud Server; with files_versions feature enabled, an attacker with read-only access to a file can restore older document versions. Remediation per sources: upgrade Nextcloud Server to 28.0.3 or later (and 26.0.12, 27.1.7 for broader Enterprise coverage; see associated ...
CVE-2023-37315
D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...
CVE-2023-37315
CVE-2023-37315 affects D-Link DAP-2622 routers. The DDP Set IPv6 Address Authentication Password vulnerability stems from improper validation of user-supplied data length copied into a fixed-length stack buffer, enabling remote code execution as root. Exploitation appears possible over a network-...
CVE-2021-37315
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations...
CVE-2021-37315
The CVE-2021-37315 entry concerns ASUS RT-AC68U router firmware prior to 3.0.0.4.386.41634, with an Incorrect Access Control flaw that lets remote attackers write arbitrary files due to improper sanitation on the source for COPY and MOVE operations. Affected product: ASUS RT-AC68U; affected compo...
CVE-2022-37315
creationtimestamp| type| source ---|---|--- 2022-08-02 02:17:18+00:00| seen| https://t.me/cibsecurity/47392...
CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
UBUNTU-CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
CVE-2022-37315
graphql-go aka GraphQL for Go through 0.8.0 has infinite recursion in the type definition parser...
CVE-2022-37315
GraphQL-go (GraphQL for Go) up to v0.8.0 contains an infinite recursion in the type-definition parser. The CVE-2022-37315 entry notes this vulnerability impact, with an NVD CVSSv3.1 base score of 7.5 (HIGH) and network attack vector, no privileges required, no user interaction, and availability i...