Cisco IOS XE Software和Cisco Catalyst 安全漏洞

Cisco IOS XE Software and Cisco Catalyst are both products of Cisco, Inc.Cisco IOS XE Software is an operating system. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity.Cisco Catalyst is a series of...

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

USN-5623-1 linux-hwe-5.15, linux-lowlatency-hwe-5.15 vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the framebuffer driver on the Linux...

CVE-2022-38830

Tenda RX9Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status...

WAVLINK WN531G3 授权问题漏洞

The WAVLINK WN531G3 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in the WAVLINK WN531G3 firmware version M31G3.V5030.200325 and prior versions, which stems from the use of an IP address to maintain a session and does not use a session token, and can be...

Microsoft Windows TCP/IP component 安全漏洞

The Microsoft Windows TCP/IP component is a Microsoft component that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. No detailed vulnerability details are provided at this time...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Bypassing authentication Bypassing security measure Remote code execution Administrator/Roo...

CVE-2022-36053 Out-of-bounds read in the uIP buffer module

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module os/net/ipv6/uipbuf.c that processes IPv6 extension headers in incoming data packets. As part of this processing, the function...

WordPress plugin Limit Login Attempts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in WordPres...

TOTOLINK A7000R 操作系统命令注入漏洞

The TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK A7000R version V9.1.0u.6115B20201022, which stems from a command injection issue in the ip parameter of the setDiagnosisCfg method...

H3C H200 缓冲区错误漏洞

The H3C H200 is a type of full gigabit home smart hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version that stems from a stack overflow in the UpdateIpv6Params method...

WordPress plugin Web Application Firewall 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2022-23798 · Totolink · Totolink A7000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: A command injection issue was found via the ip parameter at the setDiagnosisCfg function. Recommendations: For version 9.1.0u.6115 B20201022, consider restricting access to the...

PT-2022-23403 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the ip parameter in the setDiagnosisCfg function, allowing potential exploitation. Recommendations: For TOTOLINK N350RT version 9.3.5u.6139...

WordPress plugin IP Vault – WP Firewall 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

TOTOLINK A7000R 缓冲区错误漏洞

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A7000R version V9.1.0u.6115B20201022, which stems from a stack overflow in the ip parameter of the setDiagnosisCfg method...

CVE-2021-3905

A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments...

CVE-2022-2362

The Download Manager WordPress plugin before 3.2.50 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based download blocking restrictions...

PT-2022-8878 · Unknown · Cluster-Ingress-Operator

Name of the Vulnerable Software and Affected Versions: cluster-ingress-operator affected versions not specified Description: A flaw was found in the cluster-ingress-operator, related to how the router-default service allows only certain IP source ranges. This could allow an attacker to access...

PT-2022-6332 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A vulnerability was found in the Linux Kernel, affecting the vsock connect function of the net/vmw vsock/af vsock.c file. This issue is related to incorrect handling of socket block...