PT-2023-3370

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description A stack overflow issue was discovered in the D-Link N300 WI-FI Router DIR-605L, related to the webpage parameter at "/goform/formSetWanDhcpplus". This issue is associated with a...

PT-2023-1489

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description The issue is caused by a stack overflow via the webpage parameter at "/goform/formWPS". This can allow a remote attacker to execute arbitrary code. Recommendations For D-Link N300...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

Command injection

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

CVE-2022-46476 affects the D-Link DIR-859 A1 firmware (1.05). The issue is a command-injection vulnerability in the router’s soapcgi_main function, exploitable via the service= parameter due to inadequate input sanitization in the management interface. This could enable a remote attacker to execu...

CVE-2022-46476: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-859: Operating System Command Injection Vulnerability

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-3040 MiniDLNA Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The issue results from the lack of proper...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

Stack overflow

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

GSD-2023-1000441 ext4: disable fast-commit of encrypted dir operations

ext4: disable fast-commit of encrypted dir operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns a resources leak in the perf data open dir function. It was introduced in version v5.1 and fixed in version v5.15.87. The actual impact and attack plausibility have not yet...

PT-2023-33821 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential memory leak issue exists in the configfs create dir function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

CVE-2022-46475

CVE-2022-46475 affects D-Link DIR-645A1 (DIR-645) firmware 1.06B01_Beta01, with a stack overflow in the genacgi_main function triggered via the service= parameter. The vulnerability arises from memory corruption in the affected CGI handling, enabling a remote attacker to potentially crash or take...

CVE-2022-46475: Out-of-bounds Write

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

PT-2023-34317

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns a resources leak in the perf data open dir function. This problem was introduced in version v5.1 and is fixed in Linux Kernel version v5.10.163. The actual impact and atta...