Lucene search
+L

288 matches found

CNNVD
CNNVD
added 2024/01/03 12:00 a.m.12 views

Various GL.iNet products Security Breach

GL.iNet MT3000 and others are products of China-based GL.iNet GL.iNet.GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol.GL.iNet MT2500 is a router.GL.iNet MT6000 is a router. A security vulnerability exists in various GL.iNet products that originated from a vulnerability...

7.2CVSS7.7AI score0.00861EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/30 5:15 a.m.8 views

CVE-2023-47464

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function...

8.8CVSS6.1AI score0.22593EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2023/11/30 5:15 a.m.8 views

CVE-2023-47463

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the glnassys authentication function...

9.8CVSS7.7AI score0.01277EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/30 12:00 a.m.10 views

GL.iNet AX1800 Security Vulnerability

The GL.iNet AX1800 is a wireless router from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in the GL.iNet AX1800 version 4.0.0 prior to 4.5.0, which originated from a vulnerability that allows attackers to execute arbitrary code via the upload API function...

8.8CVSS7.8AI score0.22593EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/11/30 12:00 a.m.34 views

CVE-2023-47464

Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function...

9.1AI score0.22593EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.14 views

PT-2023-30460 · Gl.Inet · Gl-Inet Ax1800

Name of the Vulnerable Software and Affected Versions: GL.iNet AX1800 versions 4.0.0 through 4.4.x Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the gl nas sys authentication function. This enables the attacker to potentially gain unauthorized...

9.8CVSS8.7AI score0.01277EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.15 views

PT-2023-8992 · Gl.Inet · Gl-Inet Ax1800

Name of the Vulnerable Software and Affected Versions: GL.iNet AX1800 versions 4.0.0 through 4.4.x Description: The issue is related to insecure permissions, allowing a remote attacker to execute arbitrary code via the "upload API function". This can be achieved by sending a request to the "uploa...

9CVSS8.9AI score0.22593EPSS
SaveExploits2References9
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:00 a.m.33 views

SUSE SLES12 Security Update : tiff (SUSE-SU-2023:4371-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4371-1 advisory. - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff bsc1213589. - CVE-2023-38288: Fixed an integer overflow in raw2tiff...

6.5CVSS7AI score0.01188EPSS
SaveExploits5References24
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.11 views

PT-2023-28902 · Github +2 · Github +2

Name of the Vulnerable Software and Affected Versions: matrix-hookshot versions prior to 4.5.0 Description: The issue affects matrix-hookshot, a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Instances with enabled transformation functions, specifically those...

9CVSS8.9AI score0.00283EPSS
SaveExploits0References9
GitLab Advisory Database
GitLab Advisory Database
added 2023/08/04 12:00 a.m.92 views

Deserialization of Untrusted Data

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

9.8CVSS7.5AI score0.01776EPSS
SaveExploits0References14Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/01 12:00 a.m.32 views

Debian dla-3513 : libtiff-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3513 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3513-1 [email protected]...

6.5CVSS6.7AI score0.01188EPSS
SaveExploits5References14
CBLMariner
CBLMariner
added 2023/07/28 11:16 p.m.18 views

CVE-2023-1916 affecting package libtiff 4.5.0-3

CVE-2023-1916 affecting package libtiff 4.5.0-3. An upgraded version of the package is available that resolves this issue...

6.1CVSS7.4AI score0.00361EPSS
SaveExploits1
CBLMariner
CBLMariner
added 2023/07/28 11:16 p.m.18 views

CVE-2023-25433 affecting package libtiff 4.5.0-3

CVE-2023-25433 affecting package libtiff 4.5.0-3. An upgraded version of the package is available that resolves this issue...

5.5CVSS7.4AI score0.00421EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/11 11:31 a.m.44 views

Security Bulletin: Vulnerability of System.Text.Encodings.Web.4.5.0 .dll has afftected to .NET Agent

Summary .NET Agent is vulnerable to System.Text.Encodings.Web.4.5.0 .dll . CVE-2021-26701 This fix includes System.Text.Encodings.Web.7.0.0 upgraded to System.Text.Encodings.Web.4.5.0 .dll. Vulnerability Details CVEID:CVE-2021-26701 DESCRIPTION: Microsoft .NET Core and Visual Studio could allow a...

9.8CVSS8.2AI score0.30096EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2023/06/29 8:15 p.m.5 views

DEBIAN-CVE-2023-25433

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in tiffcrop cause heap-buffer-overflow and SEGV...

5.5CVSS7.1AI score0.00421EPSS
SaveExploits1References1
Prion
Prion
added 2023/06/29 8:15 p.m.27 views

Heap overflow

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in tiffcrop cause heap-buffer-overflow and SEGV...

1.9CVSS5.7AI score0.00421EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2023/06/29 8:15 p.m.42 views

CVE-2023-25433

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in tiffcrop cause heap-buffer-overflow and SEGV...

5.5CVSS7AI score0.00421EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/06/29 12:00 a.m.8 views

CVE-2023-25433

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in tiffcrop cause heap-buffer-overflow and SEGV...

7.4AI score0.00421EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/06/23 1:45 a.m.7 views

SUSE CVE-2023-25435

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits at /libtiff/tools/tiffcrop.c:3753...

6.1CVSS8.3AI score0.00345EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2023/06/21 8:15 p.m.36 views

CVE-2023-25435

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits at /libtiff/tools/tiffcrop.c:3753...

5.5CVSS6.8AI score0.00345EPSS
SaveExploits1References1
Rows per page
Query Builder