CVE-2021-46964 scsi: qla2xxx: Reserve extra IRQ vectors

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e "scsi: qla2xxx: Limit interrupt vectors to number of CPUs" lowers the number of allocated MSI-X vectors to the number of CPUs. That breaks vector allocation assumptions...

CVE-2021-46964

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reserve extra IRQ vectors Commit a6dcfe08487e "scsi: qla2xxx: Limit interrupt vectors to number of CPUs" lowers the number of allocated MSI-X vectors to the number of CPUs. That breaks vector allocation assumptions...

Tenda AC9 安全漏洞

Tenda AC9 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in 2016. Tenda AC9 suffers from a buffer overflow vulnerability that stems from not checking the buffer input size, which can be exploited by an attacker to execute arbitrary code via the fromSetSysTime...

Elementor Addon Elements < 1.13 - Contributor+ Stored XSS

Description The plugin is vulnerable to Stored Cross-Site Scripting via the 'button1icon' attribute of the Dual Button widget due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrar...

Tenda AC23 安全漏洞

Tenda AC23 is a dual-band wireless router from Tenda that supports 802.11acWave2 technology with dual-band concurrent transmission rates up to 2033Mbps, including up to 1733Mbps in the 5GHz band, which is suitable for high-bandwidth applications such as 4K video and online live streaming. The Ten...

CVE-2023-50934

IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme. IBM X-Force ID: 275114...

Authentication flaw

IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme. IBM X-Force ID: 275114...

CVE-2023-50934 IBM PowerSC improper authentication

IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme. IBM X-Force ID: 275114...

CVE-2023-50934 IBM PowerSC improper authentication

IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme. IBM X-Force ID: 275114...

PT-2024-14017 · Ibm · Ibm Powersc

Name of the Vulnerable Software and Affected Versions: IBM PowerSC versions 1.3 through 2.1 Description: The issue is related to the use of single-factor authentication in IBM PowerSC, which can lead to an unnecessary risk of compromise compared to the benefits of a dual-factor authentication...

TOTOLINK T8 Code Issue Vulnerability

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics that supports gigabit networks. TOTOLINK T8 has a code issue vulnerability that originates from certain unknown functions in the file /cgi-bin/cstecgi.cgi, no details of the vulnerability are provided at this time...

Totolink T8 代码问题漏洞

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics that supports gigabit networks. TOTOLINK T8 has a code issue vulnerability that originates from certain unknown functions in the file /cgi-bin/cstecgi.cgi, no details of the vulnerability are provided at this time...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from a command injection...

TOTOLINK T8 信息泄露漏洞

TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics TOTOLINK. TOTOLINK T8 suffers from an information disclosure vulnerability, which originates from the parameter ssid/key in the file /cgi-bin/cstecgi.cgi is not sufficiently protected for sensitive information, and can be...

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02211)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.stb.mode parameter of the formGetIptv method failing to correctly validate the length and size of the input data, and can be exploited...

Tenda AX1803 Security Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda, China. A security vulnerability exists in the Tenda AX1803 v1.0.0.1, which is caused by a buffer overflow vulnerability in the adv.iptv.stbpvid parameter of the setIptvInfo method...

Tenda AX3 Code Execution Vulnerability

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A code execution vulnerability exists in Tenda AX3 version v16.03.12.11, which stems from the list parameter in /goform/SetNetControlList failing to correctly filter the special elements of the constructed...

TOTOLINK EX1200L NTPSyncWithHost Interface Command Execution Vulnerability

TOTOLINK EX1200L is a dual-band wireless signal booster, mainly used to extend Wi-Fi coverage in home or office environments, solving the problem of weak signals or dead spots. The TOTOLINK EX1200L suffers from a command execution vulnerability that stems from the NTPSyncWithHost interface of...

Tenda AX12 list parameter command execution vulnerability

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A command execution vulnerability exists in Tenda AX12 version V22.03.01.46, which is caused due to the failure of the "list" parameter of /goform/SetNetControlList to correctly filter constructed command special character...

Malicious code in react-native-dual-pedometer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9acd69705b8c10caa5420e37e485d6406deb1e7006761f8316bdc7972c7cec69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...