PT-2023-5374

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10CNB05 Description The issue is related to a stack overflow in the ipportFilter function via the sip address parameter. This can allow a remote attacker to impact the confidentiality, integrity, and availability of...

CVE-2023-43239

Affected product: D-Link DIR-816 A2 (firmware version 1.10CNB05). Issue: a stack overflow in the showMACfilterMAC function triggered by the flag_5G parameter. Impact is described as high for confidentiality, integrity, and availability (per sources citing a stack overflow vulnerability with overa...

CVE-2023-43240

CVE-2023-43240 affects D-Link DIR-816 A2 firmware v1.10CNB05, where a stack overflow can be triggered via the sip_address parameter in ipportFilter. The vulnerability is network-exploitable with no authentication or user interaction required, and the CVSS metrics indicate HIGH impact on confident...

CVE-2023-43237

CVE-2023-43237 affects the D-Link DIR-816 A2 router with firmware version 1.10CNB05. The vulnerability is a stack overflow in the setMAC function triggered via the macCloneMac parameter, as described in multiple sources (NVD/Red Hat/CVE list entries). Impact is stated as high to critical in the m...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which originates from a parameter flag5G found to contain a stack overflow via showMACfilterMAC...

CVE-2023-43236

D-Link DIR-816 A2 (firmware v1.10CNB05) contains a stack overflow in the dir_setWanWifi function triggered by the statuscheckpppoeuser parameter. Public references (NVD/Red Hat) confirm impact to confidentiality, integrity, and availability (C/H/I/A) with high severity; CVSSv3.1 vectors indicate ...

PT-2023-5372 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: A stack overflow issue was discovered in the form2Dhcpip.cgi component of the D-Link DIR-816 A2 router's firmware. This issue is related to a buffer overflow in memory and can be exploited via...

CVE-2023-39637

CVE-2023-39637 affects D-Link DIR-816 A2 firmware 1.10 B05. The vulnerability is a command injection via the vulnerable component /goform/Diagnosis . CVSS-3.1 base metrics indicate network access, no privileges required, no user interaction, and high impact on confidentiality, integrity, and avai...

CVE-2023-39637: Improper Neutralization of Special Elements used in a Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

PT-2023-27041 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...

CVE-2023-3522

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

CVE-2023-3522 SQLi in a2 License Portal System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

CVE-2023-3522

CVE-2023-3522 is an SQL Injection vulnerability in the a2 License Portal System prior to version 1.48, caused by improper neutralization of special elements in SQL commands. Affected software: a2 License Portal System (before 1.48). Reported impact is severe (CVSS 3.1 base score 9.8; impact to co...

CVE-2023-3522 SQLi in a2 License Portal System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

CVE-2023-3386: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905...

CVE-2023-3522: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...

a2 (>=0.1.0, <=0.3.17), ikomia (>=0.9.0, <=0.13.0) +2 more potentially affected by CVE-2023-3765 via mlflow (1.30.0)

mlflow PYPI version 1.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - a2 =0.1.0, =0.9.0, =0.13.0 - mantik 0.1.2 - pyrovelocity 0.1.1 Source cves: CVE-2023-3765 Source advisory: OSV:GHSA-FMXJ-6H9G-6VW3...

a2 (>=0.1.0, <=0.3.17), ikomia (>=0.9.0, <=0.13.0) +2 more potentially affected by CVE-2023-3765 via mlflow (1.30.0)

mlflow PYPI version 1.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - a2 =0.1.0, =0.9.0, =0.13.0 - mantik 0.1.2 - pyrovelocity 0.1.1 Source cves: CVE-2023-3765 Source advisory: OSV:PYSEC-2023-308...

WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF)

Software WebwinkelKeur Type Plugin Vulnerable versions = 3.24 Fixed in 3.25 OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-36691 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3b517566e749 Credits qilin99 Required...

WordPress LearnDash LMS Plugin <= 4.6.0 is vulnerable to Broken Authentication

Software LearnDash LMS Type Plugin Vulnerable versions = 4.6.0 Fixed in 4.6.0.1 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-3105 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID fcee4e28c7df Credits István Márton Required...