6174 matches found
PT-2022-23549 · Unknown · Simple Task Scheduling System
Name of the Vulnerable Software and Affected Versions: Simple Task Scheduling System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete schedule" endpoint. Recommendations: F...
TOTOLINK N350RT 缓冲区错误漏洞
The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a command parameter stack overflow issue in the setTracerouteCfg method...
Tenda AC1206 缓冲区错误漏洞
Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formWifiWpsOOB function. An attacker could exploit this vulnerability to overflow the buffer...
PT-2022-23808 · H3C · H3C H200
Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetAPWifiorLedInfoById. Recommendations: For H3C H200 version H200V100R004, consider disabling the SetAPWifiorLedInfoById function as a temporar...
Tenda AC1206 缓冲区错误漏洞
Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability, which is caused by improper boundary checking of the fromSysTime function. An attacker could exploit this vulnerability to overflow the...
Information disclosure
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...
CVE-2022-33900 WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability in Easy Digital Downloads plugin = 3.0.1 at WordPress...
PT-2022-4345 · Aveva · Aveva Edge
Name of the Vulnerable Software and Affected Versions: AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...
PT-2022-23501 · Yimioa · Yimioa
Name of the Vulnerable Software and Affected Versions: Yimioa version 6.1 Description: A SQL injection issue was found in Yimioa via the orderbyGET parameter. This allows for potential manipulation of database queries. Recommendations: For Yimioa version 6.1, consider restricting access to the...
StreamLabs Desktop Application 安全漏洞
StreamLabs Desktop Application is a free live streaming and recording software from StreamLabs USA. A security vulnerability exists in StreamLabs Desktop Application version 1.9.0, which stems from the presence of incorrect access control via obs64.exe, and allows an attacker to execute arbitrary...
macOS 12.x < 12.5.1 (HT213413)
The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.5.1 Monterey. It is, therefore, affected by multiple vulnerabilities : - An out-of-bound write issue in Webkit that may lead to arbitrary code execution when processing maliciously crafted web content. CVE-2022-3289...
CVE-2022-35473
OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7...
OTFCC 缓冲区错误漏洞
OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6171b2 file...
OTFCC 缓冲区错误漏洞
OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6b84b1 file...
PT-2022-23234 · Tifig · Tifig
Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A resource allocation issue was discovered in tifig via operator newunsigned long at asan new delete.cpp. Recommendations: For tifig version 0.2.2, at the moment, there is no information about a newer version...
PT-2022-22929 · Nordic · Nordic Nrf5 Sdk For Mesh
Name of the Vulnerable Software and Affected Versions: Nordic nRF5 SDK for Mesh version 5.0 Description: A heap overflow issue can be triggered by sending a series of segmented control packets and access packets with the same SeqAuth. Recommendations: For Nordic nRF5 SDK for Mesh version 5.0,...
Intel® Support Android App Advisory
Summary: A potential security vulnerability in the Intel® Support Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-27500 Description: Incorrect default permissions for the...
TCL LinkHub Mesh Wi-Fi 安全漏洞
TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. A security vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a buffer overflow vulnerability in the GetValue function, where a specially crafted configured value may cause a buffer overflow...
PT-2022-22872 · Unknown · Triplecross
Name of the Vulnerable Software and Affected Versions: TripleCross version 0.1.0 Description: A segmentation fault occurs when sending a control command from the client to the server. This issue arises because there is no limit to the length of the output of the executed command. Recommendations:...
