SUSE-SU-2022:1892-1 Security update for dpdk

This update for dpdk fixes the following issues: Security: - CVE-2021-3839: Fixed a memory corruption issue during vhost-user communication bsc1198963. - CVE-2022-0669: Fixed a denial of service that could be triggered by a vhost-user master bsc1198964. Bugfixes: - kni: allow configuring thread...

The vulnerability of D-Link DIR-820L router’s microprogramming software, related to code errors, allows a hacker to execute arbitrary commands.

The vulnerability of D-Link DIR-820L router microprogramming software is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the device name parameter in /lan.asp...

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

CVE-2022-28905

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the devicename parameter in /etting/setDeviceName...

D-Link DAP-1330 缓冲区错误漏洞

The D-Link DAP-1330 is a networking device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330OSS-firmware1.00b21 version, which originates from a heap-based buffer overflow in the devicename parameter of /goform/setDeviceSettings in the device...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the devicemac parameter in /setting/setDeviceName...

PT-2022-2561

Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.05B03 Description The issue is related to a remote command execution vulnerability. It can be exploited via HTTP POST to get set ccp, allowing a remote attacker to execute arbitrary commands through the Device Name...

CVE-2022-26211

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...

CVE-2022-26211

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...

多款TotoLink产品 操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R and other products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the deviceName parameter and deviceMac parameter in the...

PT-2022-17726 · Totolink · Totolink A3100R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

CVE-2022-25550

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceName parameter...

CVE-2021-46355

OCS Inventory 2.9.1 is affected by Cross Site Scripting XSS. To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting XSS...

CVE-2021-46355

OCS Inventory 2.9.1 is affected by Cross Site Scripting XSS. To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting XSS...

CVE-2021-46355

OCS Inventory 2.9.1 is affected by Cross Site Scripting XSS. To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting XSS...

Ocs Inventory 跨站脚本漏洞

Ocs Inventory is an asset management solution from Ocs. It enables users to take inventory of It assets. A security vulnerability exists in OCS Inventory 2.9.1, which can be exploited by an attacker who manipulates the names of certain devices on your computer, such as printers, by replacing the...

CVE-2022-24153

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

CVE-2022-24160

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function formSetDeviceName. This vulnerability allows attackers to cause a Denial of Service DoS via the devName parameter...

CVE-2021-40412

An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 8 the devname variable, that has the value of the name parameter provided through the SetDevName API, is not validated properly. This would lead to an OS command...