Stack overflow

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment...

CVE-2022-29323

The CVE-2022-29323 entry affects D-Link DIR-816 A2_v1.10CNB04. A stack/buffer overflow is triggered by the MAC parameter in the /goform/editassignment handler. The vulnerability could allow arbitrary code execution or a system crash, as indicated by the connected records. No remediation or patch ...

CVE-2022-29323

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment...

Local Information Disclosure Vulnerability in io.netty:netty-codec-http

Description GHSA-5mcr-gq6c-3hq2 CVE-2021-21290 contains an insufficient fix for the vulnerability identified. Impact When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This...

GHSA-269Q-HMXG-M83Q Local Information Disclosure Vulnerability in io.netty:netty-codec-http

Description GHSA-5mcr-gq6c-3hq2 CVE-2021-21290 contains an insufficient fix for the vulnerability identified. Impact When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This...

TOTOLINK N600R 缓冲区错误漏洞

TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China. buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which originates from the lack of length validation of the macAddress parameter in the FUN0041b448 function . An attacker could exploit this vulnerabili...

Stable Channel Update for Desktop

The Stable channel has been updated to 101.0.4951.64 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip when processing untrusted...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the devicemac parameter in /setting/setDeviceName...

CVE-2022-29868

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used f...

CVE-2022-29868

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used f...

Input validation

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used f...

CVE-2022-29868

1Password for Mac versions 7.2.4–7.9.x prior to 7.9.3 are vulnerable to a process validation bypass. If malicious software runs on the same host while 1Password is running and unlocked, it can exfiltrate secrets (including vault items and derived sign-in values). Remediation: update to 7.9.3 or l...

CVE-2022-29868

1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate secrets from 1Password provided that 1Password is running and is unlocked. Affected secrets include vault items and derived values used f...

Tenda AX1806 Heap Overflow Vulnerability

Tenda AX1806 is a WiFi6 wireless router from Tenda China. A security vulnerability exists in the Tenda AX1806 version 1.0.0.1, which originates from a stack overflow discovered via the mac parameter in the GetParentControlInfo function. An attacker could cause a denial of service DoS by exploitin...

AgileBits 1Password 安全漏洞

AgileBits 1Password For Mac is a password management software from AgileBits Canada. It is used to store a variety of different passwords. A security vulnerability exists in 1Password version 7.2.4 through versions prior to 7.9.3, which stems from the vulnerability of passwords to process...

Google Chrome Security Update (stable-channel-update-for-desktop-2021-09) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

OpenSSL Encryption Problem Vulnerability (CNVD-2022-37790)

OpenSSL is an open source general-purpose cryptographic library from the Openssl team capable of implementing the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. The product supports multiple encryption algorithms, including symmetric ciphers, hashing algorithms, secure...

CVE-2022-28971

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28970

Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS...