EUVD-2022-45233

Malicious code in bioql PyPI...

CVE-2022-42160

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter at function SetNTPServerSettings...

CVE-2022-42161

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS...

The vulnerability of D-Link COVR 1200,1202,1203 router microprogramming software is related to errors in the code of the pseudorandom number generator. This vulnerability allows attackers to compromise the integrity of the protected information.

The vulnerability of D-Link COVR 1200,1202,1203 router microprogramming software is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

CVE-2022-42160

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter at function SetNTPServerSettings...

CVE-2022-42161

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS...

CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42159

CVE-2022-42159 affects D-Link COVR 1200/1202/1203 v1.08. The issue is a predictable seed in the device’s pseudo-random number generator, as described across multiple sources. Documented impact is limited in the provided materials; exploitation details are not listed. Some connected sources (PT-20...

CVE-2022-42156

D-Link COVR 1200/1202/1203 v1.08 exposes a command-injection in SetNetworkTomographySettings via the tomography_ping_number parameter. The vulnerability originates from insufficient data sanitization at the management level, enabling a remote attacker to execute arbitrary commands. Reported impac...