CVE-2023-33669

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...

Stack overflow

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...

CVE-2023-33669

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...

CVE-2023-33669: Out-of-bounds Write

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC8 timeZone parameter, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause a denial of service...

CVE-2023-33669

CVE-2023-33669 affects the Tenda AC8 router firmware (versions prior to V4.0-V16.03.34.06). The vulnerability is a stack overflow in the timeZone handling path (sub_44db3c), which can lead to arbitrary code execution or a denial of service. Public references describe the issue consistently, with ...

CVE-2023-33669

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub44db3c function...

CVE-2023-31529

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter...

Motorola CX2 命令注入漏洞

The Motorola CX2 is a wireless router from Motorola USA. A command injection vulnerability exists in the Motorola CX2L Router version 1.0.1, which was discovered to contain a command injection vulnerability via the systemtimetimezone parameter...

CVE-2023-31529

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter...

CVE-2023-31529

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter...

Debian dla-3413 : libdatetime-timezone-perl - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3413 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3413-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3413-1] libdatetime-timezone-perl new timezone database

------------------------------------------------------------------------- Debian LTS Advisory DLA-3413-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 02, 2023 https://wiki.debian.org/LTS -...

DLA-3413-1 libdatetime-timezone-perl - new timezone database

Bulletin has no description...

DLA-3412-1 tzdata - new timezone database

Bulletin has no description...

CVE-2023-30210

OURPHP = 7.2.0 is vulnerable to Cross Site Scripting XSS via ourphptz.php...

The vulnerability in the Altenergy Power Control software’s models/management_model.php script allows a perpetrator to elevate their privileges and execute arbitrary commands.

The vulnerability of Altenergy Power Control software is related to the execution of operating system commands in /settimezone. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary commands...

SUSE-SU-2023:1823-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 bsc1208480: Security fixes: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization bsc1207249. - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections bsc1207246. -...

rubygem-tzinfo: arbitrary code execution

A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within t...

Mageia: Security Advisory (MGASA-2023-0037)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...