CVE-2022-30924

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/aspForm...

CVE-2022-30922

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm...

CVE-2022-30918

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AspSetTelnet parameter at /goform/aspForm...

CVE-2022-30922

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm...

CVE-2022-30918

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AspSetTelnet parameter at /goform/aspForm...

CVE-2022-30910

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm...

CVE-2022-30913

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqossetbandwidth parameter at /goform/aspForm...

H3C Magic R100 缓冲区错误漏洞

H3C Magic R100 is a router from H3C.A buffer overflow vulnerability exists in the H3C Magic R100 R100V100R005 version, which stems from a buffer overflow issue in the SetMobileAPInfoById parameter of the /goform/aspForm page. No detailed vulnerability details are currently available...

Exploit for Cross-site Scripting in Asus Dsl-N14U-B1_Firmware

CVE-2022-32988 Affected products We have not yet tested As...

SUSE SLED15 / SLES15 Security Update : kernel-firmware (SUSE-SU-2022:1923-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1923-1 advisory. - Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS due to the way the Kestrel we...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload which allows an administrator to trigger remote code execution. Exploiting this vulnerability is possible by using file extension .aassp which is converted to .asp because the "as" substring is deleted. Remediation...

CVE-2021-26363

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure...

Design/Logic Flaw

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure...

CVE-2021-26363

CVE-2021-26363 affects AMD ASP/SMU firmware where a malicious or compromised UApp or ABL could modify the ASP’s reserved DRAM value outside the fenced area, potentially exposing data. The vulnerability is documented in AMD SB-1027 with platform-specific mitigations (e.g., Raven Ridge AM4 family),...

CVE-2021-26363

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure...

CVE-2021-26361

A malicious or compromised User Application UApp or AGESA Boot Loader ABL could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure...

Information disclosure

A malicious or compromised User Application UApp or AGESA Boot Loader ABL could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure...

CVE-2021-26361

A malicious or compromised User Application UApp or AGESA Boot Loader ABL could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure...

CVE-2021-26361

The CVE-2021-26361 vulnerability affects AMD ASP/AGESA Boot Loader where a malicious or compromised UApp or ABL could exfiltrate arbitrary memory from the ASP stage 2 bootloader, leading to information disclosure. The issue is tied to the boot firmware stack (AGESA PI) across multiple AMD platfor...