13900 matches found
Two PHP Object Injection Vulnerabilities Fixed in Essential Blocks
On August 18, 2023, the Wordfence Threat Intelligence team initiated the responsible disclosure process for two PHP Object Injection vulnerabilities in the Essential Blocks plugin for WordPress, a plugin with over 100,000 installations. We received a response three days later and sent over our fu...
Elevate Your Cybersecurity with Imperva Cloud WAF: More Than Just a Checkbox
In the world of digital modernization, having a web application firewall WAF isnt an option - its a necessity. But in the endless sea of security solutions, how do you choose the right one? How do you ensure that youre not merely checking a box, but genuinely fortifying your digital fortress? Whi...
kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route
This record is a duplicate of CVE-2023-4206, CVE-2023-4207, and CVE-2023-4208. Do not use this CVE record: CVE-2023-4128...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
Exploit for PHP External Variable Modification in Juniper Junos
Vulnerability Scanner for Juniper CVE-2023-36845 This vulnera...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
OESA-2023-1637 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free vulnerability in the Linux kernel's net/sched: clsroute component can be exploited to achieve local privilege escalation. When route4change is called on an existing filter, the whole tcfresult struct is always...
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 4, 2023 to September 10, 2023)
Last week, there were 107 vulnerabilities disclosed in 89 WordPress Plugins and 5 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 36 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities ...
USN-6370-1: ModSecurity vulnerabilities
It was discovered that ModSecurity incorrectly handled certain nested JSON objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-42717 It was discovered that ModSecurity incorrect...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the command-line interface of the Cisco operating system FX-OS in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances allows a attacker to create or overwrite any file in the file system.
The vulnerability of the command-line interface of the Cisco operating system, Cisco FX-OS, in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances, as well as the Secure Firewall 3100 Series, is related to the improper assignment of permissions for a...
The vulnerability of the firewall_handler_set function in the Milesight UR32L router software allows a hacker to execute arbitrary code.
The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function
A use-after-free vulnerability was found in fwsetparms in net/sched/clsfw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain loc...
kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function
A use-after-free vulnerability was found in fwsetparms in net/sched/clsfw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain loc...
Use-after-free in Linux kernel's net/sched: cls_fw component
...
September 12, 2023—KB5030216 (OS Build 20348.1970)
None None...
Tenda AC9 Buffer Overflow Vulnerability (CNVD-2023-70072)
Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 version V3.0BRV15.03.06.42multiTD01, which originates from a failure to properly validate the parameter "firewallvalue" at URL /goform/SetFirewallCfg. This vulnerability is caused due...