51 matches found
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : OpenSSH update (USN-6279-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6279-1 advisory. It was discovered that OpenSSH has an observable discrepancy leading to an information leak in the algorithm negotiation. This update...
SUSE CVE-2007-6279
Multiple double free vulnerabilities in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed 1 Seektable values or 2 Seektable Data Offsets in a .FLAC file...
PT-2022-27149 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: The issue concerns a command injection via the hostName parameter in the setOpModeCfg function. This allows for potential exploitation. No information is provided about the estimated...
CVE-2022-41525
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg function at /cgi-bin/cstecgi.cgi...
CVE-2022-41527
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser parameter in the setOpModeCfg function...
CVE-2022-41522
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an unauthenticated stack overflow via the "main" function...
Command injection
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi...
PT-2022-25905 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: A command injection issue was found via the UploadFirmwareFile function at the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK NR1800X version 9.1.0u.6279 B2021091...
CVE-2020-6279
CVE-2020-6279 entry is rejected/not used and does not represent an active vulnerability.
PLC Wireless Router GPN2.4P21-C-CN - Incorrect Access Control Exploit
Exploit for hardware platform in category web applications Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Incorrect Access Control Exploit Author: Kumar Saurav Reference: https://0dayfindings.home.blog/2019/01/15/plc-wireless-router-gpn2-4p21-c-cn-incorrect-access-control/ Vendor: ChinaMobile...
PLC Wireless Router GPN2.4P21-C-CN - Incorrect Access Control
Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Incorrect Access Control Date: 14/01/2019 Exploit Author: Kumar Saurav Reference: https://0dayfindings.home.blog/2019/01/15/plc-wireless-router-gpn2-4p21-c-cn-incorrect-access-control/ Vendor: ChinaMobile Category: Hardware Version: GPN2.4P21-C-C...
CVE-2019-6279
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 suffer an Incorrect Access Control vulnerability exposed via cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity, enabling an attacker to change the wireless password. Root cause: improper access control on the...
Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities
NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...
Privilege escalation
NVIDIA libnvmmliteaudio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-65023166...
CVE-2017-6279
NVIDIA libnvmmliteaudio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-65023166...
CVE-2017-6279
CVE-2017-6279 affects NVIDIA Tegra OpenMax component OMX.Nvidia.aac.decoder in the Android media framework. The vendor bulletin notes the component is not actively used or maintained, and that disabling dead code to avoid malicious software can allow instantiation of this component, potentially l...
CVE-2012-6279
CVE-2012-6279 entry is rejected and not used.
Cisco IOS XE IPv6 Snooping DoS (cisco-sa-20150923-fhs)
The remote Cisco IOS XE device is missing vendor-supplied security patches, and is configured for IPv6 snooping. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IPv6 Snooping feature due to missing Control Plane Protection CPPr protection mechanisms. An...