7086 matches found
D-Link Di-7200G Command Injection Vulnerability (CNVD-2022-15187)
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the proxysrv, proxysrvport, proxylanip, proxylanport parameters...
Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-16168)
The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3 that can be exploited by an attacker to cause a denial of service via the staticRouteNet, staticRouteMask, and staticRouteGateway parameters...
Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-13937)
Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a Denial of Service DoS via the wanMTU, wanSpeed, cloneType, mac, and serviceName parameters...
D-Link Di-7200G Command Injection Vulnerability (CNVD-2022-15182)
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200G V2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the path parameter...
D-Link DIR-846 Command Execution Vulnerability (CNVD-2022-38534)
The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...
D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15176)
D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...
D-Link Di-7200G Command Injection Vulnerability (CNVD-2022-15184)
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via path and time parameters...
Tenda G1 and G3 Command Injection Vulnerability (CNVD-2022-16176)
The Tenda G1 and G3 are routers from the Chinese company Tenda. A command injection vulnerability exists in the Tenda G1 and G3, which can be exploited to execute arbitrary commands via the hostName parameter...
D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15175)
D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2022-f0d84ce004)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-25335
RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulation, as exploited in the wild in February 2022. NOTE: although 2022-02-17 is the vendor's vulnerability announcement date, the vulnerability will not be remediated until a major...
Arbitrary File Deletion Vulnerability in BossCMS of Wenzhou Huanxin Information Technology Company Limited (CNVD-2022-21723)
BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. BossCMS has an arbitrary file deletion vulnerability, which can be exploited to delete any file on the server...
PJSUA API Buffer Overflow Vulnerability (CNVD-2022-14997)
Pjsua Api is an advanced Api for building Sip multimedia user agent applications, and a buffer overflow vulnerability exists in the PJSUA API, which can be exploited to cause a buffer overflow via a controlled "filename" parameter...
PJSUA API Buffer Overflow Vulnerability (CNVD-2022-14998)
Pjsua Api is an advanced Api for building Sip multimedia user agent applications, and a buffer overflow vulnerability exists in the PJSUA API, which can be exploited to cause a buffer overflow via a controlled "filename" parameter...
Jenkins Doktor Plugin Proxy Controller Security Bypass Vulnerability
Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. The Jenkins Doktor Plugin Agent Controller security bypass vulnerability can be exploited to allow an attacker to take control of the agent process to determine if a file with a given name exists...
Jenkins SWAMP Plugin Access Control Error Vulnerability
Jenkins plug-ins are plug-ins that provide functionality for Jenkins. The Jenkins SWAMP Plugin Access Control Error vulnerability can be exploited by an attacker to connect to the attacker's specified web server using the attacker's specified credentials...
Wireshark Denial of Service Vulnerability (CNVD-2022-11189)
Wireshark is a set of network packet analysis software from the Wireshark team. A denial of service vulnerability exists in Wireshark. The vulnerability is caused by the CMS dissector component, which can be exploited by an attacker to cause a denial of service by injecting malformed packets or...
Tenda Router AX12 Buffer Overflow Vulnerability
Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China.A security vulnerability exists in the Tenda Router AX12, which stems from a buffer overflow vulnerability in the sub 422CE4 function of the page goform setIPv6Status, which can be exploited by an attacker to cause a denia...
First zero-day vulnerability of Google Chrome this year actively exploited in wild
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Google released a stable channel update for their Chrome browser that contains a zero-day vulnerability and is actively being exploited-in-wild. This is the first zero-day bug reported in Chrome browser this year. A...
