4407 matches found
CVE-2022-40076: Out-of-bounds Write
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic...
CVE-2022-40071: Out-of-bounds Write
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName...
CVE-2022-40074: Out-of-bounds Write
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi...
CVE-2022-40712: Improper Neutralization of Input During Web Page Generation
An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2 endpoints...
CVE-2022-40075: Out-of-bounds Write
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...
CVE-2022-40072: Out-of-bounds Write
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement...
Tenda AC21 缓冲区错误漏洞
Tenda AC21 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC21 version V16.03.08.15, which is prone to a buffer overflow attack via the setSchedWifi function in /bin/httpd...
PT-2022-25190
Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.15 Description The issue is related to a Buffer Overflow that can be triggered via the /bin/httpd endpoint, specifically through the function fromSetWifiGusetBasic. Recommendations For Tenda AC21 version 16.03.08.15...
PT-2022-25184
Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.15 Description The issue is related to a Buffer Overflow that can be triggered via bin/httpd, specifically through the formSetFirewallCfg function. Recommendations For Tenda AC21 version 16.03.08.15, consider...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-20...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-20...
Malicious Package
Overview has-bin-entries is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
mariadb: assertion failures in decimal_bin_size
A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...
MAL-2022-3565 Malicious code in has-bin-entries (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pkg_with_bin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6344dd060632869845f44769fb6ef861c6d3c687ea297cff8c6a21c642acd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in has-bin-entries (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-40110
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa...
CVE-2022-40112
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...