Lucene search
+L

638 matches found

OSV
OSV
•added 2022/03/23 11:09 a.m.•13 views

ALBA-2022:1032 tzdata bug fix and enhancement update

The tzdata packages contain data files with rules for various time zones. The tzdata packages have been updated to version 2022a, which addresses recent time zone changes. Notably: In Palestine the daylight saving time DST starts on March 27, 2022, not on March 26. The zdump -v command now output...

7.4AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/03/17 12:00 a.m.•59 views

ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68526)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the htimezone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can ...

10CVSS4.3AI score0.0342EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/15 10:15 p.m.•5 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS6.1AI score0.0342EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/15 10:15 p.m.•28 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS0.0342EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/15 10:15 p.m.•15 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS7.5AI score0.0342EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/15 10:15 p.m.•22 views

Command injection

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS9.8AI score0.0342EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/03/15 9:56 p.m.•34 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10AI score0.0342EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/15 9:56 p.m.•96 views

CVE-2022-27000

Arris TR3300 v1.0.13 is affected by a command-injection vulnerability in the time and time zone function, exploitable via h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. The issue allows arbitrary command execution and is described across multiple sources (NVD/Red Hat/CNVD/...

10CVSS9.8AI score0.0342EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/15 12:00 a.m.•13 views

PT-2022-18177 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the time and time zone function. This vulnerability is exploited via the h primary ntp server, h backup ntp server, and h time zone...

10CVSS9.7AI score0.0342EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•16 views

ARRIS TR3300 命令注入漏洞

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the htimezone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can ...

10CVSS6AI score0.0342EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•11 views

ARRIS SBR-AC1900P和ARRIS SBR-AC3200P 操作系统命令注入漏洞

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS USA. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the TimeZone parameter in the ntp function failing to properly filter the construct command special characters, commands,...

9.8CVSS5.9AI score0.02692EPSS
SaveExploits1References2
Circl
Circl
•added 2022/02/23 10:13 p.m.•15 views

CVE-2021-4070

creationtimestamp| type| source ---|---|--- 2022-02-23 22:13:45+00:00| seen| https://t.me/cibsecurity/37964...

9.1CVSS6.4AI score0.00858EPSS
SaveExploits1References1
Microsoft KB
Microsoft KB
•added 2022/02/15 12:00 a.m.•13 views

February 15, 2022—KB5010414 (OS Build 22000.527) Preview

None None...

6.1AI score
SaveExploits0
OSV
OSV
•added 2022/02/04 2:15 a.m.•10 views

CVE-2022-24163

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the timeZone parameter...

7.5CVSS5.9AI score0.01175EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/04 2:15 a.m.•14 views

CVE-2022-24163

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the timeZone parameter...

7.8CVSS7.2AI score0.01175EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/04 2:15 a.m.•10 views

CVE-2022-24143

Tenda AX3 v16.03.12.10CN and AX12 22.03.01.2CN was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the timeZone parameter...

7.5CVSS7.2AI score0.01175EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/04 2:15 a.m.•11 views

CVE-2022-24143

Tenda AX3 v16.03.12.10CN and AX12 22.03.01.2CN was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the timeZone parameter...

7.8CVSS7.2AI score0.01175EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/02/04 12:00 a.m.•12 views

Tenda Ax3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the timeZone parameter...

7.8CVSS6.1AI score0.01175EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/20 10:15 p.m.•9 views

CVE-2021-46351

There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...

5.5CVSS5.9AI score0.00644EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/20 10:15 p.m.•14 views

CVE-2021-46346

There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...

5.5CVSS5.9AI score0.00644EPSS
SaveExploits1References2
Rows per page
Query Builder