CVE-2022-40717: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...

CVE-2022-40720

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on...

CVE-2022-40719

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpdgeneric.lua plugin for the xupnpd service, which...

CVE-2022-40718

CVE-2022-40718 concerns D-Link DIR-2150 (firmware 4.0.1). The flaw is a stack-based buffer overflow in the anweb service (listening on TCP ports 80/443) caused by improper validation of user-supplied data length, allowing network-adjacent attackers to execute code with root privileges. Multiple s...

D-Link’s various routers have buffer error vulnerabilities

The D-Link DIR-878, among others, is a wireless router from China-based AUO D-Link. A security vulnerability exists in multiple D-Link routers, which stems from the lighttpd service used in the routers failing to validate the length of user input before copying it to a specific buffer. An attacke...

CVE-2022-40719: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpdgeneric.lua plugin for the xupnpd service, which...

CVE-2022-40718: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...

CVE-2022-40718

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...

CVE-2022-40718

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue...

CVE-2022-40717

The CVE-2022-40717 entry concerns D-Link DIR-2150 routers (v4.0.1) with a stack-based buffer overflow in the anweb service (listening on TCP ports 80/443) that allows unauthenticated, network-adjacent attackers to execute code as root. The root cause is improper validation of the length of user-s...

D-Link DIR-2150 buffer error vulnerability

The D-Link DIR-2150 is a wireless router device from D-Link. The D-Link DIR-2150 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute code in the root context...

fontconfig bug fix update

An update is available for fontconfig. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fontconfig packages contain the font configuration and customization...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

PT-2023-8706

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 A1 version DIR882A1 FW130B06 Description The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-882 A1 wireless router's firmware, which fails to neutralize special elements used in operating system...

PT-2023-8705

Name of the Vulnerable Software and Affected Versions D-Link Dir 816 version DIR-816 A2 v1.10CNB04 Description The issue is related to a Command Injection vulnerability that allows attackers to run arbitrary commands via the urlAdd parameter. This can potentially enable a remote attacker to eleva...

PT-2023-36383

Уязвимость реализации протокола HNAP1 Home Network Administration Protocol микропрограммного обеспечения беспроводных маршрутизаторов D-Link DIR-882 A1 связана с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы. Эксплуатация уязвимости может...

CVE-2022-46959: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

PT-2023-15119 · Sonic · Sonic

Name of the Vulnerable Software and Affected Versions: Sonic version 1.0.4 Description: The issue allows attackers to execute a directory traversal in the component /admin/backups/work-dir. This enables attackers to access files or directories outside the intended directory structure...