CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

CVE-2024-39345

The CVE-2024-39345 issue affects AdTran 834-5 HDC17600021F1 devices running SmartOS 11.1.1.1, with a hidden, undocumented hard-coded support account whose password derives from the device MAC. Because all internet-facing interfaces share similar MACs differing only in the final octet, an attacker...

CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

Google Chrome Security Update (stable-channel-update-for-desktop_23-2024-07) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

ClusterLabs Booth’s high-Data Compromise ClusterLabs Booth’s high-

The vulnerability of the gcrymdgetalgodlen function in ClusterLabs Booth’s high-availability cluster management and monitoring software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker operating remotely to generate invalid HMACs...

Stable Channel Update for Desktop

The Stable channel has been updated to 127.0.6533.72/73 for Windows, Mac and 127.0.6533.72 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricte...

CVE-2024-41281

Linksys WRT54G v4.21.5 has a stack overflow vulnerability in getmergemac function...

Linksys WRT54G security vulnerabilities

The Linksys WRT54G is a router from Linksys USA. A buffer overflow vulnerability exists in the Linksys WRT54G v4.21.5, which stems from a boundary error in the getmergemac function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the...

PT-2024-29346 · Linksys · Linksys Wrt54G

Name of the Vulnerable Software and Affected Versions: Linksys WRT54G version 4.21.5 Description: The issue is a stack overflow vulnerability in the get merge mac function. Recommendations: For Linksys WRT54G version 4.21.5, as a temporary workaround, consider disabling the get merge mac function...

PT-2024-28754 · Unknown · Ax3000 Dual-Band Gigabit Wi-Fi 6 Router Ax9 +1

Name of the Vulnerable Software and Affected Versions: AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 version V22.03.01.46 AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 version V1.0 V22.03.01.46 Description: The issue is related to an authenticated remote command execution via the macFilterType...

Mozilla Thunderbird Security Update (MFSA2024-31) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

SUSE CVE-2022-48859

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing ofnodeput in presteraswitchsetbasemacaddr This node pointer is returned by offindcompatiblenode with refcount incremented. Calling ofnodeput to aovid the refcount leak...

Tenda AC18 Buffer Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the deviceId parameter of ip/goform/addWifiMacFilter. No detailed vulnerability details are provided at this time...

Voice Interface Privilege Escalation

The vulnerability of Voice Control in operating systems such as iPadOS, iOS, and macOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Google Chrome Security Update (stable-channel-update-for-desktop-2024-07) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2024-33181

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter...

UBUNTU-CVE-2022-48859

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing ofnodeput in presteraswitchsetbasemacaddr This node pointer is returned by offindcompatiblenode with refcount incremented. Calling ofnodeput to aovid the refcount leak...

Tenda AC18 security vulnerabilities

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the deviceId parameter of ip/goform/addWifiMacFilter. No detailed vulnerability details are provided at this time...