434 matches found
PT-2022-22896 · Wavlink · Wavlink Wn533A8 +4
Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to the wireless.cgi file, which has no filtering on parameters: delete list, delete al mac, b delete list, and b delete al mac...
PT-2022-18517 · Synology · Synology Audio Station
Name of the Vulnerable Software and Affected Versions: Synology Audio Station versions prior to 6.5.4-3367 Description: The issue is related to a buffer copy without checking the size of the input, also known as a 'Classic Buffer Overflow' vulnerability, in the cgi component. This allows remote...
Synology Media Server 安全漏洞
Synology Media Server is a media server. buffer overflow vulnerability exists in versions prior to Synology Media Server 1.8.1-2876, which stems from the existence of unchecked input size buffer replication in the cgi component, and can be exploited by remote attackers to execute arbitrary code v...
CVE-2022-22683
Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors...
The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN allows attackers to circumvent security restrictions.
The vulnerability of the Common Gateway Interface CGI interface of ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN network devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by using IPSec VPN...
AXIS Network cameras 安全漏洞
AXIS Network cameras are webcams from the Swedish company AXIS. A security vulnerability exists in AXIS Network cameras P1204, P3225, P3367, M3045, M3005, and M3007, which stems from improper privilege management in component CGI scripts...
Barco Control Room 跨站脚本漏洞
Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14. The vulnerability stems from the URL parameter of the...
CVE-2022-31015
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select. This will lead to the main thread raising an exception that is not handled and then causing t...
CVE-2022-31015 Uncaught Exception (due to a data race) leads to process termination in Waitress
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select. This will lead to the main thread raising an exception that is not handled and then causing t...
CVE-2022-31015
CVE-2022-31015 affects the Python WSGI server Waitress, specifically versions 2.1.0 and 2.1.1. The root cause is a thread closing a socket while the main thread is about to call select(), causing the main thread to raise an unhandled exception and potentially terminate the entire application. The...
Waitress 安全漏洞
Waitress is a WSGI Web Server Gateway Interface server for Python. A security vulnerability exists in Waitress versions 2.1.0 and 2.1.1, which originates from a thread terminating prematurely by closing a socket when the main thread is about to call select...
The vulnerability of the sapi/cgi/cgi_main.c component of the PHP programming language interpreter allows a attacker to cause a service failure.
The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the CGI microprogramming system handlers of ZyXEL NBG6816 (Armor Z1) and NBG6817 (Armor Z2) allows a hacker to execute arbitrary commands.
The vulnerability of CGI microprogramming system processors in Wi-Fi routers from ZyXEL NBG6816 Armor Z1 and NBG6817 Armor Z2 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute...
The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, USG FLEX, ATP, ZyWALL, VPN, and NSG allows attackers to bypass authentication processes and gain increased privileges.
The vulnerability of the Common Gateway Interface CGI interface of ZyXEL USG, USG FLEX, ATP, ZyWALL, VPN, and NSG network devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass authentication processes and gain increased...
VulnCheck KEV: CVE-2019-7483
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server...
CVE-2022-24761
Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagree on where one request starts and...
CVE-2022-24761
CVE-2022-24761 affects Waitress (Python WSGI server) up to version 2.1.0. The advisory describes two vulnerability classes that enable HTTP request smuggling when Waitress runs behind a proxy that does not fully validate RFC7230: (1) parsing integers with Python int(), allowing +10 to be treated ...
Fortinet FortiMail 输入验证错误漏洞
Fortinet FortiMail is a suite of email security gateway products from Fortinet, Inc. The product provides email security protection and data protection, among other features.An input validation error vulnerability exists in the FortiMail Web server CGI facility. An unauthenticated attacker could...
