8253 matches found
CVE-2022-47618 Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials
Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service...
CVE-2022-39042
CVE-2022-39042 concerns aEnrich a+HRD, where the login function has improper validation. An unauthenticated, remote attacker can bypass authentication and access API functionality to execute arbitrary system commands or disrupt services. Documented impact includes full authentication bypass and p...
CVE-2022-46306
CVE-2022-46306 affects ChangingTec ServiSign. The vulnerability is a path traversal caused by insufficient filtering of special characters in the DLL file path, enabling an unauthenticated attacker to host a malicious website that causes the component to load arbitrary DLL files, potentially enab...
CVE-2022-47618 Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials
Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service...
CVE-2022-46306 ChangingTec ServiSign - Path Traversal
ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files...
CVE-2022-40740 Realtek GPON router - Command Injection
Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrator can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...
CVE-2022-46306 ChangingTec ServiSign - Path Traversal
ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files...
aEnrich a+HRD 授权问题漏洞
aEnrich a+HRD is a full-service human resources development solution from aEnrich, Inc. A security vulnerability exists in aEnrich a+HRD that stems from an incorrect login authentication feature in its a+HRD allowing an unauthenticated, remote attacker to bypass authentication and gain access to...
CVE-2022-43436 HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Arbitrary File Upload
The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service...
Realtek GPON router 安全漏洞
The Realtek GPON router is a series of routers from China-based Realtek Semiconductor Realtek. A security vulnerability exists in the Realtek GPON router, which stems from an insufficient filtering of special characters that could allow a remote attacker with administrator privileges to perform a...
CVE-2022-34676
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, information disclosure, or data tampering...
UBUNTU-CVE-2022-34677
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause an integer to be truncated, which may lead to denial of service or data tampering...
UBUNTU-CVE-2022-34670
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or...
The vulnerability of the smb2_write function (fs/ksmbd/smb2pdu.c) in the ksmbd module of the Linux operating system allows a hacker to disclose protected information or cause service failures.
The vulnerability of the smb2write function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service...
The vulnerability of the WILC1000 wireless network driver for Linux operating systems allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the wireless network driver WILC1000 drivers/net/wireless/microchip/wilc1000/cfg80211.c in the Linux kernel is related to the lack of checking for the IEEE80211P2PATTROPERCHANNEL length. Exploiting this vulnerability can allow a attacker to execute arbitrary code or cause...
The vulnerability of the Ldoms component in the Oracle Solaris operating system allows a perpetrator to gain read access to data, obtain privileged access to infrastructure, or cause partial service interruption.
The vulnerability of the Ldoms component in the Oracle Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain read access to data, obtain privileged access to infrastructure resources, or cause partial service interruption...
The Guardian hit by "ransomware attack"
On Tuesday December 20, 2022 British newspaper The Guardian experienced a major IT security incident that crippled a part of its IT infrastructure. The suspected cause is ransomware. In an online article the newspaper published an internal statement from the chief executive and the editor-in-chie...
The vulnerability of the free_charger_irq() function in the drivers/power/supply/wm8350_power.c file of the Linux kernel allows a hacker to cause a service failure or gain increased privileges.
The vulnerability of the freechargerirq function in the drivers/power/supply/wm8350power.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...
The vulnerability of the `__do_proc_dointvec` function in the Linux operating system’s kernel allows a hacker to cause a service failure or enhance their privileges.
The vulnerability of the doprocdointvec function in the Linux operating system’s kernel is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...
PT-2022-6165 · Juniper Networks · Junos Evolved +1
Name of the Vulnerable Software and Affected Versions: Junos OS version 22.3R1 Junos OS Evolved version 22.3R1-EVO Description: The issue is related to an Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved. This vulnerabili...