9747 matches found
PT-2022-2681 · Pjsip +4 · Pjsip +4
Name of the Vulnerable Software and Affected Versions: PJSIP versions 2.12 and prior Description: The issue is related to a stack buffer overflow vulnerability in the PJSIP multimedia communication library, specifically affecting users of PJSUA2 or those who call the API endpoints pjmedia sdp pri...
PT-2022-17319 · Tcpprep +2 · Tcpprep +2
Name of the Vulnerable Software and Affected Versions: tcpprep version 4.4.1 Description: The issue is related to a reachable assertion in the packet2tree function at tree.c in tcpprep. This assertion is assertl2len 0, indicating a potential problem when the l2len variable is not greater than 0...
PT-2022-6317 · Unknown · Explore Cms
Name of the Vulnerable Software and Affected Versions: Explore CMS version 1.0 Description: The issue is related to a lack of protection against SQL query structure exploitation, which can lead to remote attackers performing cross-site scripting attacks. The vulnerability can be exploited via a...
PT-2022-16790 · Canon · Canon Imageclass Mf644Cdw
Name of the Vulnerable Software and Affected Versions: Canon imageCLASS MF644Cdw version 10.02 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...
PT-2022-17287 · Tenda · Tenda Ac9
Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: The issue is related to multiple stack overflows that can occur via the NPTR, V12, V10, and V11 parameters in the Formsetqosband function. This can potentially lead to exploitation. Recommendations: F...
PT-2022-16791 · Canon · Canon Imageclass Mf644Cdw
Name of the Vulnerable Software and Affected Versions: Canon imageCLASS MF644Cdw version 10.02 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...
ChainSafe js-libp2p-noise 数据伪造问题漏洞
ChainSafe js-libp2p-noise is an open source implementation of TypeScript containing the noise protocol from ChainSafe Canada. ChainSafe js-libp2p-noise is vulnerable to a data forgery issue that allows a man-in-the-middle to impersonate other peers and disable those peers...
PT-2022-17233
Name of the Vulnerable Software and Affected Versions set-in versions prior to 2.0.3 Description The issue allows an attacker to perform Prototype Pollution via the setIn method, enabling them to merge object prototypes into it. This problem stems from an incomplete fix of a previous issue...
PT-2022-16282
Name of the Vulnerable Software and Affected Versions node-ipc versions 10.1.1 through 10.1.2 Description The issue concerns malicious code embedded in the node-ipc package, targeting users with IP addresses located in Russia or Belarus. This code overwrites files with a heart emoji. The package...
PT-2022-5670 · Ckeditor4 +1 · Ckeditor4 +1
Name of the Vulnerable Software and Affected Versions: CKEditor4 versions prior to 4.18.0 Description: The issue is related to the dialog plugin in CKEditor4, which contains a vulnerability allowing abuse of a dialog input validator regular expression. This can cause a significant performance dro...
PT-2022-3854 · Totolink · Totolink A3100R +5
Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 TOTOLINK A810R version 4.1.2cu.5182 B20201026 TOTOLINK A830R version 5.9c.4729 B20191112 TOTOLINK A3000RU version 5.9c.5185 B20201128 TOTOLINK A3100R version 4.1.2cu.5050 B20200504 TOTOLINK A950RG...
PT-2022-17727 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: Totolink X5000R Firmware version 9.1.0u.6118 B20201102 Description: The issue is related to a command injection vulnerability in the setNtpCfg function, specifically via the tz parameters. This allows attackers to execute arbitrary commands b...
PT-2022-1373 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to an integer overflow in the rndis set response function of the rndis.c file, which could lead to a local escalation of privilege. This can occur if a...
PT-2022-5912 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.16-rc6 Description: An issue in the Linux kernel is related to a null pointer dereference in the netvsc get ethtool stats function in drivers/net/hyperv/netvsc drv.c. This occurs due to a lack of check of the...
PT-2022-26180
Name of the Vulnerable Software and Affected Versions Synapse versions prior to 1.53.0 Description The issue arises when Synapse attempts to generate URL previews for media stream URLs without properly limiting connection time. Connections are only terminated after a certain amount of data max...
CVE-2021-41233
Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with the Nextcloud Text application, which is by default shipped with Nextcloud Server, an attacker is able to access the folder names of "File Drop". For successful exploitation an...
Code injection
Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with the Nextcloud Text application, which is by default shipped with Nextcloud Server, an attacker is able to access the folder names of "File Drop". For successful exploitation an...
CVE-2021-41233 Missing authorization in Nextcloud text
Nextcloud text is a collaborative document editing using Markdown built for the nextcloud server. Due to an issue with the Nextcloud Text application, which is by default shipped with Nextcloud Server, an attacker is able to access the folder names of "File Drop". For successful exploitation an...
