5793 matches found
ipv6: sr: fix memleak in seg6_hmac_init_algo
...
kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route()
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smcibfindroute In smcibfindroute, the neighbour found by neighlookup and rtable resolved by iprouteoutputflow are not released or put before return. It may cause the refcount leak, so fix...
Xibo CMS SQL注入漏洞
Xibo CMS is an open source content management system from Xibo Digital Signage. Xibo CMS has a SQL injection vulnerability that originates from a SQL injection vulnerability in the API routing, which allows an attacker to obtain and modify arbitrary data in the Xibo database by injecting a...
Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails
An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email security vendor Proofpoint's defenses to send millions of messages spoofing various popular companies like Best Buy, IBM, Nike, and Walt Disney, among others. "These emails...
httpd: Potential SSRF in mod_rewrite
A flaw was found in the modrewrite module of httpd. A potential SSRF allows an attacker to cause unsafe rules used in the RewriteRule directive to unexpectedly set up URLs to be handled by the modproxy module...
CLSA-2024-1721659604 Fix of 96 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-35902 - net/rds: fix possible cp null dereference CVE-url: https://ubuntu.com/security/CVE-2024-38587 - speakup: Fix sizeof vs ARRAYSIZE bug CVE-url: https://ubuntu.com/security/CVE-2024-39493 - crypto: qat - Fix ADFDEVRESETSYNC memory leak CVE-url:...
Tenda AX12 Denial of Service Vulnerability
Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of Routing...
Tenda AX2 Pro Code Execution Vulnerability
Tenda AX2 Pro is a home user designed entry-level Gigabit Wi-Fi 6 router from Tenda China. A code execution vulnerability exists in Tenda AX2 Pro version V16.03.29.48, which can be exploited by an attacker to execute arbitrary code via the Routing feature...
CVE-2024-40515
An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48cn allows a remote attacker to execute arbitrary code via the Routing functionality...
CVE-2024-40515
An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48cn allows a remote attacker to execute arbitrary code via the Routing functionality...
CVE-2024-40503
An issue in Tenda AX12 v.16.03.49.18cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling...
CVE-2024-40503
An issue in Tenda AX12 v.16.03.49.18cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling...
CVE-2024-40516
An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality...
UBUNTU-CVE-2022-48810
In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip6mrfreetable on failure path ip6mrfreetable can only be called under RTNL lock. RTNL: assertion failed at net/core/dev.c 10367 WARNING: CPU: 1 PID: 5890 at net/core/dev.c:10367...
CVE-2024-40503
An issue in Tenda AX12 v.16.03.49.18cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling...
CVE-2024-40516
An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality...
CVE-2024-40515
CVE-2024-40515 affects SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro (V16.03.29.48_cn). The vulnerability allows remote code execution via the device’s Routing functionality. Multiple connected sources confirm a network-remote compromise with high impact (C/H/I/A). Root cause details are not exh...
CVE-2024-40516
CVE-2024-40516 affects H3C Magic RC3000 RC3000V100R009. The vulnerability exists in the Routing functionality and enables a remote attacker to execute arbitrary code. Reported severity is CVSS 3.1 base score 8.8 (HIGH) with adjacent attack vector, no privileges, no user interaction required, and ...