13931 matches found
OESA-2023-1637 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free vulnerability in the Linux kernel's net/sched: clsroute component can be exploited to achieve local privilege escalation. When route4change is called on an existing filter, the whole tcfresult struct is always...
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 4, 2023 to September 10, 2023)
Last week, there were 107 vulnerabilities disclosed in 89 WordPress Plugins and 5 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 36 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities ...
USN-6370-1: ModSecurity vulnerabilities
It was discovered that ModSecurity incorrectly handled certain nested JSON objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-42717 It was discovered that ModSecurity incorrect...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the command-line interface of the Cisco operating system FX-OS in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances allows a attacker to create or overwrite any file in the file system.
The vulnerability of the command-line interface of the Cisco operating system, Cisco FX-OS, in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances, as well as the Secure Firewall 3100 Series, is related to the improper assignment of permissions for a...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function
A use-after-free vulnerability was found in fwsetparms in net/sched/clsfw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain loc...
kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function
A use-after-free vulnerability was found in fwsetparms in net/sched/clsfw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain loc...
Use-after-free in Linux kernel's net/sched: cls_fw component
...
September 12, 2023—KB5030216 (OS Build 20348.1970)
None None...
Tenda AC9 Buffer Overflow Vulnerability (CNVD-2023-70072)
Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 version V3.0BRV15.03.06.42multiTD01, which originates from a failure to properly validate the parameter "firewallvalue" at URL /goform/SetFirewallCfg. This vulnerability is caused due...
USN-6342-2: Linux kernel (Azure)
Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...
CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus to gain unauthorized access and establish persistence on compromised systems...
Vulnerability of the net/sched: cls_fw component in Linux operating system kernels, which allows attackers to increase their privileges
The vulnerability of the net/sched:clsfw component in Linux operating systems relates to the possibility of exploitation after it is released. Exploiting this vulnerability could allow an attacker to enhance their privileges...
The vulnerability of the packet filter component in the FreeBSD operating system, which allows a hacker to bypass existing firewall rules
The vulnerability of the packet filter component in the FreeBSD operating system is related to errors that occur when the scrub fragment reassemble rule is used. Exploiting this vulnerability can allow a remote attacker to bypass existing firewall rules...
CVE-2023-40942
Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...
CVE-2023-40942
Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...
Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475
Actions to take today to mitigate malicious cyber activity: 1. Patch all systems for known exploited vulnerabilities KEVs, including firewall security appliances. 2. Monitor for unauthorized use of remote access software using endpoint detection tools. 3. Remove unnecessary disabled accounts and...
CVE-2023-40942
Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 version V3.0BRV15.03.06.42multiTD01, which originates from a failure to properly validate the parameter "firewallvalue" at URL /goform/SetFirewallCfg. This vulnerability is caused due...