10273 matches found
DEBIAN-CVE-2023-49287
TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...
UBUNTU-CVE-2023-49287
TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydirfileopen function. This vulnerability has been patched in version 1.2.6...
PT-2023-7503 · D Link · D-Link Dir-846
Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version FW100A53DBR Description: A critical vulnerability was found in the D-Link DIR-846 router, affecting an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the smartqos express devices...
PT-2024-19522
Name of the Vulnerable Software and Affected Versions D-Link DIR-815 router firmware version 1.04 Description A command injection issue exists in the ssdpcgi main function within the cgibin binary of the D-Link DIR-815 router firmware. The issue is due to a lack of input validation. Successful...
PT-2023-8889 · D Link · D-Link Dir-882
Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 version DIR882A1 FW130B06 Description: The issue is caused by a stack overflow in the sub 477AA0 function of the D-Link DIR-882 router's firmware. This can allow a remote attacker to cause a denial of service or execute arbitra...
VulnCheck KEV: CVE-2021-46442
In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization...
xfsdump bug fix and enhancement update
An update is available for xfsdump. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The xfsdump package contains xfsdump, xfsrestore, and other utilities for...
SetQuickVPNSettings Module Code Execution
The vulnerability of the SetQuickVPNSettings module in D-Link’s wireless router products, such as DIR-882 and DIR-878, is related to a stack overflow caused by a password parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
D-Link SetWLanRadioSecurity Code Execution
The vulnerability of the SetWLanRadioSecurity module in D-Link’s wireless router software, such as the DIR-882 and DIR-878 models, is related to a flaw in buffer handling. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
SetQuickVPNSettings Module Code Execution
The vulnerability of the SetQuickVPNSettings module in D-Link’s wireless router products, such as DIR-882 and DIR-878, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
SetDynamicDNSSettings Module Code Execution
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, is related to an issue with buffer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
SetSysEmailSettings Module Code Execution
The vulnerability of the SetSysEmailSettings module in D-Link’s wireless router microprogramming software, such as DIR-882 and DIR-878, is related to an issue with buffer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link N300 WI-Fi Router DIR-605L Code Execution
The vulnerability of the /goform/formSetEmail component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute arbitrary...
D-Link N300 WI-Fi Router DIR-605L Code Execution
The vulnerability of the /goform/formSetRoute component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point’s microprogramming software relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...
D-Link N300 WI-Fi Router DIR-605L Code Execution
The vulnerability of the /goform/formEasySetupWizard3 component of the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute...
D-Link N300 WI-Fi Router DIR-605L Code Execution
The vulnerability of the /goform/formSetACLFilter component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point software relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute...
D-Link N300 WI-Fi Router DIR-605L Code Execution
The vulnerability of the /goform/formSetACLFilter component in the D-Link N300 Wi-Fi Router DIR-605L wireless access point software relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute...
D-Link DIR-3040 prog.cgi Code Execution
The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer and is stored in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted HNAP...
D-Link DIR-820L Router Code Execution
The vulnerability of D-Link DIR-820L router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
GHSA-C827-HFW6-QWVM rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion
Summary When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and unbounded memory explosion gigabytes in a few seconds i...