635 matches found
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. Bug...
CVE-2024-45887
creationtimestamp| type| source ---|---|--- 2024-11-04 16:57:12+00:00| seen| https://t.me/cvedetector/9755 2025-08-23 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulr4xe22v...
PT-2024-8355 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A critical vulnerability was found in the function FUN 0044db3c of the file /goform/fast setting wifi set. The manipulation of the argument timeZone leads to a stack-based buffer overflow. The attac...
CVE-2024-45179
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injection attacks. It was found out that different functionality is vulnerable to OS command injection attacks, for exampl...
CVE-2024-45179
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injection attacks. It was found out that different functionality is vulnerable to OS command injection attacks, for exampl...
CVE-2024-45179
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injection attacks. It was found out that different functionality is vulnerable to OS command injection attacks, for exampl...
CVE-2024-45179
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injection attacks. It was found out that different functionality is vulnerable to OS command injection attacks, for exampl...
Time Zone Database - XenMobile Reference
The TimeZone Tz database, can be also known as IANA Time Zone Database, is a collaborative compilation of information about the world’s time.The TZ column in the attached table is the standard format intended to be used with computer programs and operating systems...
CVE-2024-32937
An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A specially crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this...
Tenda AC500 安全漏洞
Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, with support for managing wireless networks across VLANs. A buffer overflow vulnerability exists in the Tenda AC500, which stems from the timeZone parameter of the formSetTimeZone method...
OESA-2024-1399 rubygem-tzinfo security update
TZInfo provides daylight savings aware transformations between times in different time zones. Security Fixes: TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when use...
OESA-2024-1398 rubygem-tzinfo security update
TZInfo provides daylight savings aware transformations between times in different time zones. Security Fixes: TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when use...
CLSA-2024-1711564698 Update of alt-php
New upstream 2024a version: - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - zic no longer pretends to support indefinite-past DST. - localtime no longer mishandles Ciudad Juárez in 2422. New upstream 2023d version: - Ittoqqortoormiit,...
CLSA-2024-1711564218 Update of alt-php
New upstream 2024a version: - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - zic no longer pretends to support indefinite-past DST. - localtime no longer mishandles Ciudad Juárez in 2422. New upstream 2023d version: - Ittoqqortoormiit,...
The vulnerability of the fromSetSysTime() function (/goform/SetSysTimeCfg) in the Tenda AC10 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromSetSysTime function /goform/SetSysTimeCfg in the Tenda AC10 router’s microprogramming system is related to the operation where the output goes beyond the buffer in memory when processing the timeZone parameter. Exploiting this vulnerability can allow an attacker to...
CVE-2024-2856
A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone leads to stack-based buffer overflow. The attack may be...
Tenda AC10 安全漏洞
Tenda AC10 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC10 version 16.03.10.13, which is caused by a stack-based buffer overflow in the timeZone parameter of the fromSetSysTime method on the /goform/SetSysTimeCfg page...
PT-2024-2392 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 versions 16.03.10.13 through 16.03.10.20 Description: The issue is related to the function fromSetSysTime in the /goform/SetSysTimeCfg file, which is vulnerable to a stack-based buffer overflow when handling the timeZone parameter...
About the security content of tvOS 17.3
About the security content of tvOS 17.3 This document describes the security content of tvOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of watchOS 10.3
About the security content of watchOS 10.3 This document describes the security content of watchOS 10.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...