4234 matches found
CVE-2025-45987
Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...
PT-2025-25404 · Blink · Bl-X10 Ac8 +8
Name of the Vulnerable Software and Affected Versions: Blink routers BL-WR9000 version 2.4.9 Blink routers BL-AC1900 version 1.0.2 Blink routers BL-AC2100 AZ3 version 1.0.4 Blink routers BL-X10 AC8 version 1.0.5 Blink routers BL-LTE300 version 1.2.3 Blink routers BL-F1200 AT1 version 1.0.0 Blink...
CVE-2025-45986
The CVE-2025-45986 entry concerns a command-injection vulnerability in Blink routers via the mac parameter of the bs_SetMacBlack function. Affected devices include BL-WR9000 (v2.4.9), BL-AC2100 AZ3 (v1.0.4), BL-X10 AC8 (v1.0.5), BL-LTE300 (v1.2.3), BL-F1200 AT1 (v1.0.0), BL-X26 AC8 (v1.2.8), BLAC...
CVE-2025-45984
CVE-2025-45984 affects multiple Blink router models (BL-WR9000 2.4.9; BL-AC1900 1.0.2; BL-AC2100 AZ3 1.0.4; BL-X10 AC8 1.0.5; BL-LTE300 1.2.3; BL-F1200 AT1 1.0.0; BL-X26 AC8 1.2.8; BLAC450M AE4 4.0.0; BL-X26 DA3 1.2.7). A command injection vulnerability exists via the routepwd parameter in the su...
CVE-2025-45987
This CVE affects Blink router models: BL-WR9000 (v2.4.9), BL-AC2100 AZ3 (v1.0.4), BL-X10 AC8 (v1.0.5), BL-LTE300 (v1.2.3), BL-F1200 AT1 (v1.0.0), BL-X26 AC8 (v1.2.8), BLAC450M AE4 (v4.0.0), and BL-X26 DA3 (v1.2.7). The issue is multiple command injection in the bs_SetDNSInfo function via dns1 and...
CVE-2025-45985
CVE-2025-45985 affects Blink router models including BL-WR9000 (2.4.9), BL-AC2100 AZ3 (1.0.4), BL-X10_AC8 (1.0.5), BL-LTE300 (1.2.3), BL-F1200_AT1 (1.0.0), BL-X26_AC8 (1.2.8), BLAC450M_AE4 (4.0.0), and BL-X26_DA3 (1.2.7). A command injection vulnerability exists in the bs_SetSSIDHide function, al...
CVE-2025-45988
The CVE-2025-45988 entry affects Blink routers (BL-WR9000, BL-AC2100 AZ3, BL-X10 AC8, BL-LTE300, BL-F1200 AT1, BL-X26 AC8, BLAC450M AE4, BL-X26 DA3) with multiple command injection vulnerabilities in the bs_SetCmd function via the cmd parameter. Root cause: improper handling of the cmd parameter ...
CVE-2025-45988
Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...
Vulnerabilities fixed in Google Chrome and Microsoft Edge
Google has fixed vulnerabilities in Google Chrome versions before 137.0.7151.68. The vulnerabilities are in Google Chrome's V8 engine and Blink. The first vulnerability involves out of bounds read and write problems that can lead to heap corruption. This can be exploited by a malicious party by...
Google Chrome memory misreference vulnerability (CNVD-2025-12379)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to free usage in Blink. An attacker can exploit the vulnerability to execute arbitrary code on the system...
SUSE CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
Chromium: CVE-2025-5068 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
DEBIAN-CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
CVE-2025-5068 is a use-after-free in Blink affecting Google Chrome prior to 137.0.7151.68. The underlying issue is a heap corruption risk in Blink triggered by crafted HTML pages, with the CVSS vector indicating NETWORK attack vector, low attack complexity, and user interaction required, yielding...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
[SECURITY] Fedora 42 Update: chromium-137.0.7151.55-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to free usage in Blink. An attacker can exploit the vulnerability to execute arbitrary code on the system...