CVE-2022-30024

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 firmware version 3.16.9 devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841NEUV12160624 and TL-WR841 V11...

CVE-2022-28369

Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enablessh sub-operation of the crtcrpc JSON listener found at /lib/functions/wncjsonsh/crtcmode.sh A remote attacker on the local network can provide a malicious URL. The data...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from a boundary condition when parsing a PRT file. A remote attacker can create a specially crafted file and trick a...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2123)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Spryker Commerce OS 1.4.2 allows Remote Command Execution...

The vulnerability of microprogrammed software in industrial switches such as SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M lies in buffer overflows in the stack. This allows attackers to execute arbitrary code.

The vulnerability of the microprogrammed software of industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M, SIPL...

The vulnerability of the Disaster Recovery function in Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and the integrated Cisco Unity Connection messaging system allows a intruder to execute arbitrary commands with administrator privileges.

The vulnerability of the Disaster Recovery function in Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, and the integrated Cisco Unity Connection messaging system is related to access control deficiencies. Exploiting this vulnerability could allow ...

Code injection in Apache Commons Configuration

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the...

Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a buffer error vulnerability that...

CVE-2022-21744

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data PNCD improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-32385

Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code remote...

The vulnerability of Thunderbird email client, Firefox and Firefox ESR browsers, related to errors in processing the header of the isolated programming environment CSP without the “allow-scenarios” parameter, allows a hacker to circumvent the implemented CSP restrictions and execute any desired scenario.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to errors in processing the header of the isolated programming environment CSP, without the “allow-scenarios” parameter. Exploiting this vulnerability allows a remote attacker to circumvent...

The vulnerability of the set method in the json-pointer utility allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the set method in the json-pointer utility is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

Vim del_typebuf function buffer overflow vulnerability

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0, which stems from an integer overflow or wrap-around in the deltypebuf function. An attacker can exploit the vulnerability to crash the software, modify memory, and possibly remote execution...

Vim suggest_trie_walk function buffer overflow vulnerability

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to Vim 9.0 that stems from a boundary error in the suggesttriewalk function when handling untrusted input. An attacker can exploit the vulnerability to cause a software crash, memory modification, and...

Vim inc function buffer overflow vulnerability

Vim is a cross-platform text editor. versions prior to Vim 9.0.0011 are vulnerable to a buffer overflow vulnerability that stems from a boundary error in the inc function when handling untrusted input. A remote attacker could exploit this vulnerability to crash the software, modify memory, and...

CVE-2022-2268

The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to Vim 9.0 that stems from a boundary error in the suggesttriewalk function when handling untrusted input. An attacker can exploit the vulnerability to cause a software crash, memory modification, and...

Vim 输入验证错误漏洞

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0, which stems from an integer overflow or wrap-around in the deltypebuf function. An attacker can exploit the vulnerability to crash the software, modify memory, and possibly remote execution...

vim: heap buffer overflow in vim_strncpy

A flaw was found in vim, where it is vulnerable to a heap buffer overflow in the vimstrncpy findword function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...