523 matches found
PT-2022-7420 · Mplayer +4 · Mplayer +4
Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the gen sh video function in mplayer/libmpdemux/demux mov.c. This can potentially allow an attacker to cause a...
PT-2022-7411 · Unknown +3 · Libmpdemux +3
Name of the Vulnerable Software and Affected Versions: mplayer version SVN-r38374-13.0.1 mencoder version SVN-r38374-13.0.1 Description: The issue is related to a buffer overflow vulnerability via the asf init audio stream function in the libmpdemux/asfheader.c file. This can lead to a denial of...
PT-2022-8058 · Smarty +2 · Smarty +2
Name of the Vulnerable Software and Affected Versions: Smarty versions prior to 3.1.47 Smarty versions 4.x prior to 4.2.1 Description: The issue allows cross-site scripting XSS in the libs/plugins/function.mailto.php file. A web page using smarty function mailto and parameterized with GET or POST...
PT-2022-23667 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So
Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so library versions prior to SMR Sep-2022 Release 1 Description: A heap-based overflow vulnerability in the GetCorrectDbLanguageTypeEsPKc function allows an attacker to cause a memory access fault...
PT-2022-17601 · Google · Jib-Core
Name of the Vulnerable Software and Affected Versions: com.google.cloud.tools:jib-core versions prior to 0.22.0 Description: The issue allows for Remote Code Execution RCE via the isDockerInstalled function, due to attempting to execute input. Recommendations: For versions prior to 0.22.0, update...
PT-2022-23488 · Tenda · Tenda G3
Name of the Vulnerable Software and Affected Versions: Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE Description: The issue is caused by a buffer overflow in the getsinglepppuser function due to sscanf. Recommendations: For Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE, as a temporary...
PT-2022-23527 · Unknown · Pkuvcl Davs2
Name of the Vulnerable Software and Affected Versions: PKUVCL davs2 version 1.6.205 Description: A global buffer overflow was discovered in the parse sequence header function at source/common/header.cc:269. This issue affects the specified version of PKUVCL davs2. Recommendations: For PKUVCL davs...
PT-2022-17431 · Npm · @Pendo324/Get-Process-By-Name
Name of the Vulnerable Software and Affected Versions: @pendo324/get-process-by-name versions all Description: The issue is related to Arbitrary Code Execution due to improper sanitization of the getProcessByName function. This allows for potential code execution without proper validation...
PT-2022-24452 · Linksys · Linksys E1200
Name of the Vulnerable Software and Affected Versions: Linksys E1200 version 1.0.04 Description: The issue is related to a buffer overflow vulnerability. It can be triggered via the ej get web page name function. Recommendations: For Linksys E1200 version 1.0.04, as a temporary workaround, consid...
PT-2022-24457 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A heap buffer overflow issue was found in the function formSetFixTools, allowing attackers to cause a Denial of Service DoS via the MACAddr parameter. Recommendations: For Tenda M3 version...
PT-2022-24464 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A buffer overflow was discovered in the function formSetGuideListItem. Recommendations: For Tenda M3 version 1.0.0.124856, consider disabling the formSetGuideListItem function until a patch is...
PT-2022-24456 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A heap buffer overflow issue was found in the formSetFixTools function, allowing attackers to cause a Denial of Service DoS by exploiting the lan parameter. Recommendations: For Tenda M3 version...
PT-2022-23413 · H3C · H3C Magic Nx18 Plus
Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function UpdateIpv6Params. Recommendations: For version NX18PV100R003, consider disabling the UpdateIpv6Params function as a temporary...
PT-2022-23416 · H3C · H3C Magic Nx18 Plus
Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function edditactionlist. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, as a temporary workaround, consider disabling the...
PT-2022-23808 · H3C · H3C H200
Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetAPWifiorLedInfoById. Recommendations: For H3C H200 version H200V100R004, consider disabling the SetAPWifiorLedInfoById function as a temporar...
PT-2022-23392 · H3C · H3C B5 Mini
Name of the Vulnerable Software and Affected Versions: H3C B5 Mini version B5MiniV100R005 Description: A stack overflow issue was discovered via the function SetAPWifiorLedInfoById. This issue affects the H3C B5 Mini device. Recommendations: For version B5MiniV100R005, consider disabling the...
PT-2022-23781 · H3C · H3C Gr-1200W
Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered in the function UpdateWanParamsMulti. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, as a temporary workaround, consider disabling the...
PT-2022-24084 · Tenda · Tenda Ac1206
Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the page parameter in the fromDhcpListClient function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider disabling the fromDhcpListClient...
PT-2022-5112 · Assimp +2 · Assimp +2
Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp versions prior to the version containing the fix for the segmentation violation in Assimp::XFileImporter::CreateMeshes Description: The issue is related to a segmentation violation in the...
PT-2022-21677 · Unknown · Zoo Management System
Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: A stored cross-site scripting XSS issue in the Add Classification function allows attackers to execute arbitrary web scripts or HTML via unspecified vectors. This could potentially lead to the...