21561 matches found
CVE-2024-52336
A script injection vulnerability was identified in the Tuned package. The instancecreate D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with scriptpre or scriptpost options that permit arbitrary...
SUSE-SU-2024:4053-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...
D-Link DI-8200 Command Injection Vulnerability
The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...
D-Link DI-8400 arp_sys_asp Buffer Overflow Vulnerability
The D-Link DI-8400 is a wireless router from China-based AUO D-Link. The D-Link DI-8400 arpsysasp suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the service program or execute arbitrary code in the application...
The vulnerability of the microprogrammed software of the D-Link DSL6740C modem, related to the display of the WiFi password, allows a intruder to execute a brute-force attack.
The vulnerability of D-Link DSL6740C modem’s microprogramming software lies in the fact that the default Wi-Fi password is displayed during network scanning. Exploiting this vulnerability allows a remote attacker to execute a brute-force attack...
D-Link DI-8400 tgfile_htm Buffer Overflow Vulnerability
The D-Link DI-8400 is a wireless router from China-based AUO D-Link. The D-Link DI-8400 tgfilehtm suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash the service program or execute arbitrary code in the application...
CVE-2024-52998
Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...
D-LINK DI-8003 Buffer Overflow Vulnerability (CNVD-2024-46386)
The D-LINK DI-8003 is a router product manufactured by D-LINK. A buffer overflow vulnerability exists in the D-LINK DI-8003 product. The vulnerability stems from a buffer overflow issue in the hostip parameter of the ipsecroadasp function. No detailed vulnerability details are available at this...
The vulnerability of the msp_info_htm function in D-Link DI-8400 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the mspinfohtm function in D-Link DI-8400 router microprogramming software is related to the lack of measures taken to neutralize special elements used in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands when processing the flag a...
D-LINK DI-8400 Remote Command Execution Vulnerability
The D-LINK DI-8400 is an American D-Link router device for home and small business network connectivity. Multiple remote command execution vulnerabilities exist in the mspinfohtm function in the D-LINK DI-8400 version v16.07.26A1 via the flag and cmd parameters. A remote attacker can exploit this...
The vulnerability of the tgfile_htm function in D-Link DI-8003 router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tgfilehtm function in D-Link DI-800 router microprogramming software is related to the execution of operations outside the buffer during the processing of the fn parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity...
CVE-2024-52755
D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the hostip parameter in the ipsecroadasp function...
CVE-2024-52755
D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the hostip parameter in the ipsecroadasp function...
CVE-2024-51151
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...
CVE-2024-51151
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...
D-Link DI-8003 安全漏洞
The D-LINK DI-8003 is a router product manufactured by D-LINK. A buffer overflow vulnerability exists in the D-LINK DI-8003 product. The vulnerability stems from a buffer overflow issue in the hostip parameter of the ipsecroadasp function. No detailed vulnerability details are available at this...
D-Link DI-8200 安全漏洞
The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...
D-Link DI-8100 Buffer Overflow Vulnerability
The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from the ippositionasp function failing to properly validate the length and size of the...
D-Link DI-8003 ip_position.asp function buffer overflow vulnerability
The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003 ipposition.asp function. The vulnerability stems from the ippositionasp function failing to correctly validate the length and size of the input data, which can be...
D-Link Routers Incorrect Use Of Privileged APIs (CVE-2024-11068)
The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any userâs password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that userâs account. Note that Nessus has not tested f...