Tenda AC15 Buffer Overflow Vulnerability (CNVD-2022-75823)

Tenda AC15 is a wireless router from Tenda, China. Tenda AC15 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the WifiBasicSet function. A remote attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code on the system...

OESA-2022-1850 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: A buffer overflow was addressed with improved bounds checking. This...

Apple Releases Security Updates to Patch Two New Zero-Day Vulnerabilities

Apple on Wednesday released security updates for iOS, iPadOS, and macOS platforms to remediate two zero-day vulnerabilities previously exploited by threat actors to compromise its devices. The list of issues is below - CVE-2022-32893 - An out-of-bounds write issue in WebKit which could lead to th...

Tenda W6 Stack Overflow Vulnerability (CNVD-2022-75819)

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. Tenda W6 is vulnerable to a stack overflow vulnerability caused by improper boundary checking in the function setAutoPing. A remote attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code on...

[slackware-security] rsync

New rsync packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/rsync-3.2.5-i586-1slack15.0.txz: Upgraded. Added some file-list safety checking that helps to ensure that a rogue...

CVE-2022-33991

dproxy-nexgen aka dproxy nexgen forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

CVE-2022-33992

DNRD aka Domain Name Relay Daemon 2.20.3 forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

CVE-2022-33992

DNRD aka Domain Name Relay Daemon 2.20.3 forwards and caches DNS queries with the CD aka checking disabled bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers...

The vulnerability of the SMB1 protocol implementation in the Samba network communication software allows a perpetrator to induce a service failure.

The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the fact that the operation values are written outside the buffer in memory during the range checking process. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Keyguard component, which stems from a lack of permission checking...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in the Google Android ActivityManager component that stems from a lack of privilege checking, with a possible way to check the functionality of another process...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android bluetooth component, which stems from a lack of privilege checking, with a possible method to enable or disable bluetooth connectivity without...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android version 13, which stems from a lack of boundary checking in Bluetooth, which could lead to out-of-bounds writes, and which could be exploited by an...

Heap overflow

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly gain code execution...

CVE-2022-20792

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly gain code execution...

CVE-2022-20792

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly gain code execution...

CVE-2022-20792

A vulnerability in the regex module used by the signature database load module of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database load time, and possibly gain code execution...

CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

Input validation

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking...

CVE-2022-27551

CVE-2022-27551 affects HCL Launch. An authenticated user could obtain sensitive information due to improper security checking. Affected product/versions cited by connected sources include HCL Launch 7.x.x.x (CNNVD notes specific 7.0.0.0–7.0.5.11, 7.1.0.0–7.1.2.7, 7.2.0.0–7.2.3.0) with the issue s...