6965 matches found
Stack overflow
There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...
CVE-2022-27022
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
CVE-2022-27022
CVE-2022-27022 is a stack overflow in the SetSysTimeCfg() function of the httpd service on Tenda AC9 V15.03.2.21_cn. An attacker can obtain a stable root shell via a crafted payload. Affected software: Tenda AC9 (httpd). Root cause: stack overflow in SetSysTimeCfg(); impact: remote code execution...
CVE-2022-27016
There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...
CVE-2022-27016
CVE-2022-27016 affects Tenda AC9, specifically the httpd service with firmware 15.03.2.21_cn. The vulnerability is a stack overflow in SetStaticRouteCfg(), as described across multiple sources (CNVD/CNNVD, NVD, Red Hat, CVE listing). Exploitation could allow an attacker to obtain a root shell via...
CVE-2022-22720 affecting package httpd 2.4.52-1
CVE-2022-22720 affecting package httpd 2.4.52-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-22721 affecting package httpd 2.4.52-1
CVE-2022-22721 affecting package httpd 2.4.52-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-22719 affecting package httpd 2.4.52-1
CVE-2022-22719 affecting package httpd 2.4.52-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-23943 affecting package httpd 2.4.52-1
CVE-2022-23943 affecting package httpd 2.4.52-1. An upgraded version of the package is available that resolves this issue...
PT-2022-18183
Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.2.21 cn Description There is a stack overflow issue in the SetStaticRouteCfg function within the httpd service. This issue may potentially allow for exploitation, although specific details about the estimated number of...
Tenda AC9 缓冲区错误漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 has a security vulnerability that originates from a stack overflow in the SetSysTimeCfg function of the httpd service. An attacker could exploit the vulnerability to cause a server-side stack overflow...
CVE-2022-27016: Out-of-bounds Write
There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...
CVE-2022-27022: Out-of-bounds Write
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
PT-2022-18185
Name of the Vulnerable Software and Affected Versions Tenda AC9 version V15.03.2.21 cn Description The issue is related to a stack overflow vulnerability in the SetSysTimeCfg function within the httpd service. This vulnerability allows an attacker to obtain a stable root shell through a...
The vulnerability of httpd-demon in NETGEAR’s integrated router software—NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43, NETGEAR RAX45, NETGEAR RAX48, NETGEAR RAX50, NETGEAR RAX50S, NETGEAR RS400, NETGEAR R7100LG, NETGEAR LAX20, NETGEAR CAX80, NETGEAR MR80, NETGEAR MS80—allows a hacker to bypass authentication.
The vulnerability of httpd-demon in NETGEAR’s integrated router software—NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43,...
RHEL 6 : httpd (RHSA-2022:1173)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1173 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Errors encountered during...
CVE-2022-28380
The rc-httpd component through 2022-03-31 for 9front Plan 9 fork allows ..%2f directory traversal if serve-static is used...
CVE-2022-28380
The rc-httpd component through 2022-03-31 for 9front Plan 9 fork allows ..%2f directory traversal if serve-static is used...
