CVE-2020-9285

Some versions of Sonos One 1st and 2nd generation allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device...

CVE-2020-9285

Some versions of Sonos One 1st and 2nd generation allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device...

Sonos 安全漏洞

Sonos is an ultimate wireless home audio system from Sonos. Sonos suffers from a security vulnerability that stems from allowing access to some or all of its memory through attacker-controlled hardware that can be connected to the Mini-PCI Express slot on the device's motherboard that hosts the...

PT-2022-9075 · Sonos · Sonos One

Name of the Vulnerable Software and Affected Versions: Sonos One versions 1st and 2nd generation Description: The issue allows partial or full memory access via attacker-controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard, which hosts the WiFi card on the...

The vulnerability in the web interface for managing the Cisco Unified Intelligence Center reporting tool and the Cisco Unified Contact Center Express operator automation tool allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

CVE-2022-41787

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate...

CVE-2022-41787

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate...

CVE-2022-41787 BIG-IP DNS Express vulnerability CVE-2022-41787

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate...

CVE-2022-41787

CVE-2022-41787 is a confirmed BIG-IP DNS Express vulnerability. Affected: BIG-IP with DNS Express enabled on a virtual server (DNS profile) across multiple releases, including 17.x, 16.x, 15.x, 14.x, 13.x. Root cause: undisclosed DNS queries with DNSSEC can cause TMM termination, leading to denia...

CVE-2022-41787 BIG-IP DNS Express vulnerability CVE-2022-41787

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A code issue vulnerability exists in F5 BIG-IP that stems from an undisclosed DNS query using DNSSEC that could cause TMM to terminate when...

F5 Networks BIG-IP : BIG-IP DNS Express vulnerability (K70569537)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5.1 / 14.1.5.1 / 15.1.6.1 / 16.1.3.1 / 17.0.0.1 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K70569537 advisory. - In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1,...

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data Orac...

CVE-2022-41623

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

hapi-saml2 (>=3.2.0, <=3.2.1), tensor-cloudnative-express-auth (>=1.0.69, <=2.0.6) potentially affected by CVE-2022-39299 via passport-saml (3.2.0)

passport-saml NPM version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on passport-saml and may be impacted: - hapi-saml2 =3.2.0, =1.0.69, =2.0.6 Source cves: CVE-2022-39299 Source advisory: OSV:GHSA-M974-647V-WHV7...

plastics-express.co.uk Cross Site Scripting vulnerability OBB-2979389

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cisco IOS XE Software 操作系统命令注入漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE Software suffers from an operating system command injection...

Cisco IOS XE Software 代码问题漏洞

Cisco IOS XE Software is an operating system from Cisco for enterprise wired and wireless access, aggregation, core and WAN in a single operating system, Cisco IOS XE reduces business and network complexity. An error can be exploited by an attacker to cause a denial of service...

Express XSS Sanitizer prototype contamination vulnerability

Express XSS Sanitizer is a personal development by AhmedAdelFahim to clean user input data in req.body, req.query, req.headers and req.params to prevent cross-site scripting XSS attacks. express XSS Sanitizer A prototype contamination vulnerability exists in versions prior to 1.1.3, which stems...

Prototype Pollution

express-xss-sanitizer is vulnerable to prototype pollution. The vulnerability exists in require function of sanitize.js because it doesn't properly sanitize the user input data which allows an attacker to inject and execute arbitrary javascript...