Moderate: Red Hat Security Advisory: ruby security update

An update for ruby is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact ...

ruby: Unintentional directory traversal by poisoned NULL byte in Dir

It was found that the methods from the Dir class did not properly handle strings containing the NULL byte. An attacker, able to inject NULL bytes in a path, could possibly trigger an unspecified behavior of the ruby script...

D-Link Multiple Routers HNAP strncmp Incorrect Comparison Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue...

PT-2020-1849

Name of the Vulnerable Software and Affected Versions D-Link DIR-867 versions 1.10B04 D-Link DIR-878 versions 1.10B04 D-Link DIR-882 versions 1.10B04 Description The issue is related to errors in the implementation of the authentication algorithm in the HNAP Private Login component of the D-Link...

PT-2020-1848

Name of the Vulnerable Software and Affected Versions D-Link DIR-867 versions 1.10B04 D-Link DIR-878 versions 1.10B04 D-Link DIR-882 versions 1.10B04 Description The issue is related to errors in handling empty passwords in the HNAP strncmp component of the D-Link DIR-867, DIR-878, and DIR-882...

Remote Command Execution Vulnerability in web server in D-link DIR-823G router firmware

The D-Link DIR-823G is a wireless router. A remote command execution vulnerability exists in the web server in the D-link DIR-823G router firmware. An attacker could exploit this vulnerability by sending a constructed specially crafted POST request to execute arbitrary operating system commands...

Buffer overflow vulnerability in web server in D-link DIR-823G router firmware

The D-Link DIR-823G is a wireless router. A buffer overflow vulnerability exists in the web server in the D-link DIR-823G router firmware. An attacker can exploit this vulnerability to cause a buffer overflow attack...

Remote Command Execution Vulnerability in D-link DIR-823G Router

The D-Link DIR-823G is a wireless router. A remote command execution vulnerability exists in the D-link DIR-823G router. An attacker can exploit this vulnerability to execute arbitrary system commands...

D-Link DIR-842 REVC Buffer Overflow Vulnerability

The D-Link DIR-842 REVC is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-842 REVC using firmware version v3.13B09 HOTFIX. The vulnerability originates when a network system or product performs an operation on memory without properly...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

Stack overflow

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

CVE-2020-8962

CVE-2020-8962 describes a stack-based buffer overflow in the D-Link DIR-842 REVC, caused by the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint (firmware v3.13B09 HOTFIX). The provided documents do not explicitly detail the impact beyond the overflow descriptio...

PT-2020-20399

Name of the Vulnerable Software and Affected Versions D-Link DIR-842 REVC version v3.13B09 HOTFIX Description A stack-based buffer overflow issue was discovered due to the use of strcpy for LOGINPASSWORD when handling a POST request to the "/MTFWU" endpoint. Recommendations For D-Link DIR-842 REV...

CVE-2020-8962: Out-of-bounds Write

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

DEBIAN-CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

UBUNTU-CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

PT-2020-7095

Name of the Vulnerable Software and Affected Versions Joomla! version 1.6.0 Description The issue is related to SQL Injection via the filter order and filer order Dir parameters. This allows for potential exploitation. Recommendations For Joomla! version 1.6.0, consider restricting access to the...