CVE-2022-4687

The CVE-2022-4687 entry concerns usememos/memos prior to version 0.9.0 with an issue described as the incorrect use of privileged APIs in the GitHub repository. The vulnerability is rated HIGH (CVSS ~8.1), with potential high impact on confidentiality and integrity but no availability impact repo...

CVE-2022-45666

CVE-2022-45666 affects Tenda i22 (firmware version 1.0.0.3, build 4687). A buffer overflow exists in the formwrlSSIDset function exposed by the list parameter. Documented impact indicates Availability impact (A) High and potential for disruption; other CIAImpact fields are none. No concrete patch...

CVE-2022-45664

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDget function...

CVE-2022-45672

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the formWx3AuthorizeSet function...

CVE-2022-45671

The CVE-2022-45671 entry concerns Tenda i22, version 1.0.0.3(4687). The vulnerability is a buffer overflow in the appData parameter of the formSetAppFilterRule function. Reported impact indicates availability impact HIGH, with no confidentiality or integrity impact stated. The NVD/CNA data sets s...

CVE-2022-45664

CVE-2022-45664 affects Tenda i22, firmware version 1.0.0.3(4687). The vulnerability is a buffer overflow in the list parameter of the formwrlSSIDget function, due to insufficient input length validation. Reported impact includes potential service disruption for affected devices (CNVD/CVE referenc...

Tenda i22 跨站请求伪造漏洞

Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version V1.0.0.34687. An attacker can exploit this vulnerability to perform cross-site request forgery CSRF attacks via fromSysToolReboot...

PT-2022-27605 · Tenda · Tenda I22

Name of the Vulnerable Software and Affected Versions: Tenda i22 version 1.0.0.34687 Description: A buffer overflow issue was discovered via the index parameter in the formWifiMacFilterSet function. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...

CentOS 8 : oddjob (CESA-2020:4687)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4687 advisory. - oddjob: race condition in oddjobselinuxmkdir function in mkhomedir.c can lead to symlink attack CVE-2020-10737 Note that Nessus has not tested for this issue...

CVE-2019-4687

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 171823...

CVE-2019-4687

CVE-2019-4687 affects IBM Security Guardium Data Encryption (GDE) 3.0.0.2, where sensitive data is stored in URL parameters. The root cause is the disclosure risk from information in URLs that can be exposed via server logs, referrer headers, or browser history. The vulnerability is documented ac...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerability (USN-4687-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4687-1 advisory. A use-after-free was discovered in Firefox when handling SCTP packets. An attacker could potentially exploit this to cause a denial of...

Oracle Linux 8 : oddjob (ELSA-2020-4687)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4687 advisory. 0.34.5-3 - Support HOMEMODE from /etc/login.defs Resolves: rhbz1886362 0.34.5-2 - Add gating tests using idm:DL1 module stream and upstream tests Resolves:...

RHEL 8 : oddjob (RHSA-2020:4687)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4687 advisory. The oddjob packages contain a D-Bus service which performs particular tasks for clients which connect to it and issue requests using the system-wide...

CVE-2020-4687

IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679...

CVE-2020-4687

CVE-2020-4687 affects IBM Content Navigator in IBM Case Manager, with prior public details indicating that authenticated users could access another user’s cached content. Connected IBM advisories confirm the vulnerability in IBM Content Navigator 3.0.7/3.0.8 and provide remediation guidance. Reme...

Debian: Security Advisory (DSA-4687-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mantis Bug Tracker 1.1.3 - 'manage_proj_page' PHP Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mantis manageprojpage PHP Code Execution', 'Description' = %q Mantis v1.1.3 and earlier are vulnerable to a post-authentication Remote Code...

Mantis manage_proj_page PHP Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mantis manageprojpage PHP Code Execution', 'Description' = %q Mantis v1.1.3 and earlier are vulnerable to a post-authentication Remote Code...

CVE-2017-4687

...