be.zvz:KotlinInside (>=1.14.0 <=1.14.6), io.github.dimensiondev:maskwalletcore (=0.5.0) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.20.0 <=3.20.1)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.20.0, =1.14.0, =1.14.6 - io.github.dimensiondev:maskwalletcore =0.5.0 Source cves: CVE-2022-3171 Source advisory: OSV:GHSA-H4H5-3HR4-J3G2...

PT-2022-12988 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: HTMLDOC versions prior to 1.9.15 Description: A heap buffer overflow issue exists in the image set mask function, allowing an attacker to write outside the buffer boundaries. Recommendations: For versions prior to 1.9.15, update to version...

ZKSecurity BIO 3.0.5.0_R Privilege Escalation

ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco Version Affected: 3.0.5.0R CVE: CVE-2022-36634 Vulnerability: User privilege escalation CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton Santos. INTRODUCTION Based on the hybrid biometric technology and...

GSD-2022-1005931 udmabuf: Set the DMA mask for the udmabuf device (v2)

udmabuf: Set the DMA mask for the udmabuf device v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...

GSD-2022-1005731 udmabuf: Set the DMA mask for the udmabuf device (v2)

udmabuf: Set the DMA mask for the udmabuf device v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

PT-2022-34432 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to a warning for CONFIG CPUMASK OFFSTACK in the cpuinfo area of the MIPS architecture. The actual impact and potential for attack have not been proven yet...

PT-2022-34189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.4.212 Description: The issue is related to setting the DMA mask for the udmabuf device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

GSD-2022-1005421 udmabuf: Set the DMA mask for the udmabuf device (v2)

udmabuf: Set the DMA mask for the udmabuf device v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...

GSD-2022-1005012 udmabuf: Set the DMA mask for the udmabuf device (v2)

udmabuf: Set the DMA mask for the udmabuf device v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.7 by commit...

PT-2022-33679 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.65 Description: The issue is related to setting the DMA mask for the udmabuf device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

CVE-2022-36571

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting...

CVE-2022-36571

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting...

Stack overflow

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting...

CVE-2022-36571

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting...

CVE-2022-36571

CVE-2022-36571 affects Tenda AC9 firmware v15.03.05.19, where a stack overflow can be triggered by the mask parameter in the /goform/WanParameterSetting endpoint. The issue arises from how the mask parameter is processed, leading to potential overflow. Multiple sources corroborate the description...

PT-2022-23478 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.19 Description: A stack overflow issue was discovered, which can be triggered via the mask parameter at the "/goform/WanParameterSetting" API endpoint. Recommendations: For Tenda AC9 version 15.03.05.19, avoid using...

CVE-2022-35522

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: pppusername, ppppasswd, rwangateway, rwanmask and rwanip, which leads to command injection in page /wan.shtml...

PT-2022-22885 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on certain parameters in the adm.cgi file, specifically ppp username, ppp passwd, rwan gateway, rwan mas...

CVE-2022-34642

The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service DoS...

CVE-2022-34642

The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service DoS...