CVE-2022-32966

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

Code injection

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-41675

CVE-2022-41675 affects Raiden MAILD Mail Server (Team Johnlong) with a formula/injection vulnerability in form content. A remote attacker with general user privileges can inject malicious code into the form content on the web interface. When another user exports that content to CSV, the exported ...

CVE-2022-32966 Realtek RTL8111FP-CG - Missing Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-32966

CVE-2022-32966 concerns Realtek RTL8111FP-CG/RTL8168FP-CG devices. The Dash remote management function has missing authorization, enabling an unauthenticated attacker on an adjacent network to connect to the DASH service port and disrupt service. The CVE is documented with a CVSSv3.1 base score o...

PT-2022-26018 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: A remote attacker with general user privilege can inject malicious code in the form content of the Raiden MAILD Mail Server website. When other users export the form conten...

The vulnerability of the microprogrammed software of Moxa routers series TN-5916, TN-4900, EDR-G903, EDR-G902, and EDR-810 is related to errors in processing input data, which can allow a perpetrator to cause service failures.

The vulnerability of the microprogrammed routing software from Moxa, models TN-5916, TN-4900, EDR-G903, EDR-G902, and EDR-810, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service failures by sending specially crafted HTTP/HTTPS...

The vulnerability of VMware Cloud Foundation’s virtualization platform, related to incorrect restrictions on XML links to external objects, allows attackers to trigger service failures or expose protected information.

The vulnerability of VMware Cloud Foundation’s virtualization platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information using specially created XML code...

The vulnerability of the TIFFReadRGBATileExt() function in the LibTIFF library, related to integer overflow, allows attackers to cause a service failure.

The vulnerability of the TIFFReadRGBATileExt function libtiff/tifgetimage.c in the LibTIFF library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created file...

The vulnerability of the USB redirection channel (urbdrc) in the FreeRDP remote desktop protocol allows a intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the USB redirection channel urbdrc in the FreeRDP remote desktop protocol is related to the issue where operations are performed outside the buffer during data input length checking. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Security Advisory - Improper Input Validation Vulnerability in a Huawei Children's Watch

Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal. Vulnerability ID:HWPSIRT-2022-53187 This vulnerability has been assigned a CVE ID: CVE-2022-39012...

The vulnerability of the my_strcasecmp_8bit component of the MariaDB database, related to memory usage after its deallocation, allows a attacker to cause a service failure.

The vulnerability of the mystrcasecmp8bit component of the MariaDB database is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure through a specially crafted SQL query...

The vulnerability of the Unbound DNS-server module allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Unbound DNS-server module involves a lack of measures for securing input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the PCIDSK::CPCIDSKFile::ReadFromFile function in the GDAL geospatial data translator library allows a attacker to cause a service failure.

The vulnerability of the PCIDSK::CPCIDSKFile::ReadFromFile function in the GDAL geospatial data transformation library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Binary_string::free_buffer() function in the /sql/sql_string.h component of the MariaDB database, which allows a attacker to cause a service failure.

The vulnerability of the Binarystring::freebuffer function in the /sql/sqlstring.h component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the Twisted Web HTTP 1.1 module of the Twisted.web.http network framework allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Twisted Web HTTP 1.1 module of the Twisted.web.http network framework in Twisted is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Hints::Hints function (poppler/Hints.cc) in the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Hints::Hints function in the Poppler PDF rendering library is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service interruptions through a specially created PDF file...

The vulnerability of the software platform for managing administrative policies and privileges, Policykit, is related to the lack of mechanisms for encoding or shielding output data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the software platform for managing administrative policies and privileges related to Policykit lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...

The vulnerability of the Dict::find() function in the Dict.cc component of the Poppler PDF handling library allows a attacker to cause a service failure.

The vulnerability of the Dict::find function in the Dict.cc component of the Poppler PDF handling library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created PDF file...