CVE-2022-30922: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm...

CVE-2022-30921: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm...

CVE-2022-30917: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm...

CVE-2022-30914: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm...

CVE-2022-30910: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm...

CVE-2022-30909: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm...

H3C Magic R100 Buffer Error Vulnerability

H3C Magic R100 is a router from H3C. H3C Magic R100R100V100R005 version has a buffer overflow vulnerability, which originates from a stack overflow issue in the AddWlanMacList parameter in /goform/aspForm, and can be exploited by an attacker to run arbitrary code in the context of the affected...

H3C Magic R100 Buffer Error Vulnerability

H3C Magic R100 is a router from H3C. H3C Magic R100R100V100R005 version has a buffer overflow vulnerability, which originates from a stack overflow problem in the EditBasicSSID5G parameter in /goform/aspForm, and can be exploited by remote attackers to execute arbitrary code...

PT-2022-20375

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005 Description A stack overflow issue was discovered via the UpdateSnat parameter at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R100 version R100V100R005, consider restricting access to t...

H3C Magic R100 Buffer Error Vulnerability

H3C Magic R100 is a router from H3C.A security vulnerability exists in the H3C Magic R100 R100V100R005 version, which stems from a pair-based buffer overflow in the EditWlanMacList parameter of the /goform/aspForm page. No detailed vulnerability details are available at this time...

PT-2022-20385

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005 Description A stack overflow issue was discovered via the SetAPWifiorLedInfoById parameter at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R100 version R100V100R005, consider restricting...

PT-2022-20382

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005 Description A stack overflow issue was discovered via the SetMobileAPInfoById parameter at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R100 version R100V100R005, as a temporary...

H3C Magic R100 Buffer Error Vulnerability

H3C Magic R100 is a router from H3C in China. buffer overflow vulnerability exists in H3C Magic R100 R100V100R00 version. There are no detailed vulnerability details provided...

CVE-2022-30913: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqossetbandwidth parameter at /goform/aspForm...

H3C Magic R100 Buffer Error Vulnerability

H3C Magic R100 is a router from H3C. H3C Magic R100 R100V100R005 version has a buffer overflow vulnerability, which originates from a buffer overflow issue in the EditMacList parameter of the /goform/aspForm page. No detailed vulnerability details are currently available...

PT-2022-20372

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005 Description A stack overflow issue was discovered via the UpdateWanParams parameter at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R100 version R100V100R005, avoid using the...

CVE-2022-30915: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm...

Codiad Vulnerable to PHP Magic Hash Vulnerability

Codiad 2.8.4 /componetns/user/class.user.php:Authenticate is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234something can successfully authenticate...

GHSA-8FHH-HF9W-55P7 Codiad Vulnerable to PHP Magic Hash Vulnerability

Codiad 2.8.4 /componetns/user/class.user.php:Authenticate is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234something can successfully authenticate...

Improper Authentication in Jenkins Active Directory Plugin

Jenkins Active Directory Plugin implements two separate modes: Integration with ADSI on Windows, and an OS agnostic LDAP-based mode. The LDAP-based mode in Active Directory Plugin starting in version 1.44 and prior to versions 2.16.1 and 2.20 shares code between user lookup and user authenticatio...