Tenda TX3 缓冲区错误漏洞

Tenda TX3 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda TX3 that originates from a stack overflow contained in the timeZone parameter of /goform/SetSysTimeCfg. No details of the vulnerability are provided at this time...

D-Link COVR 命令注入漏洞

D-Link COVR is a series of routers from China-based AUO D-Link. A security vulnerability exists in D-Link COVR versions 1200, 1202, 1203 v1.08, which originates from a command injection vulnerability contained via the systemtimetimezone parameter in the function SetNTPServerSettings...

August 9, 2022—KB5016639 (OS Build 10240.19387) - EXPIRED

None None...

October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED

None None...

October 11, 2022—KB5018419 (OS Build 17763.3532) - EXPIRED

None None...

October 11, 2022—KB5018421 (OS Build 20348.1129)

None None...

October 11, 2022—KB5018427 (OS Build 22621.674)

None None...

September 13, 2022—KB5017367 (Monthly Rollup)

None None...

September 13, 2022—KB5017316 (OS Build 20348.1006)

None None...

September 13, 2022—KB5017370 (Monthly Rollup)

None None...

iana-time-zone vulnerable to use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...

GHSA-3FG9-HCQ5-VXRC iana-time-zone vulnerable to use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...

PT-2022-28198 · Unknown · Moment-Timezone

Name of the Vulnerable Software and Affected Versions: moment-timezone versions 0.1.0 through 0.5.34 Description: The issue concerns command injection vulnerabilities in moment-timezone. An attacker can execute arbitrary commands on the system running the grunt task with the same privileges as th...

Debian DLA-3077-1 : ruby-tzinfo - LTS security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3077 advisory. - TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior ...

RUSTSEC-2022-0049 Use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...

Use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...

CLSA-2022-1659644194 Update of tzdata

Fix contents of several patches that ended up not being applied...

CLSA-2022-1659643786 Update of tzdata

Fix contents of several patches that ended up not being applied...

SUSE SLES15 Security Update : rubygem-tzinfo (SUSE-SU-2022:2592-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2592-1 advisory. - TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to...

CVE-2022-31163

A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within t...