CVE-2021-46304

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions, CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions, CP-8021 MASTER MODULE All versions, CP-8022 MASTER MODULE WITH GPRS All versions. The component allows to activate a web server module which provide...

PT-2022-4104 · Unknown · Cp-8000 Master Module With I/O -40/+70°C +3

Name of the Vulnerable Software and Affected Versions: CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions CP-8021 MASTER MODULE All versions CP-8022 MASTER MODULE WITH GPRS All versions Description: A vulnerability has been identified in th...

CVE-2022-27185

A denial of service vulnerability exists in the confctlsetmasterwlan functionality of TCL LinkHub Mesh Wifi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

ASUSTOR Data Master 缓冲区错误漏洞

ASUSTOR Data Master is a proprietary operating system for ASUSTOR NAS from Taiwan's ASUSTOR, featuring a tablet-like graphical interface with a zero learning curve, making it easy to get started right out of the box. A security vulnerability exists in ASUSTOR Data Master versions 3.5.9.RUE3 and...

LibreOffice < 7.2.7 / 7.3 < 7.3.3 Multiple Vulnerabilities (Windows)

According to its self-reported version, the LibreOffice application running on the remote host is prior to 7.2.7 or 7.3.3. It is, therefore, affected by multiple vulnerabilities: - LibreOffice supports the storage of passwords for web connections in the user's configuration database. The stored...

TCL LinkHub Mesh Wi-Fi 信息泄露漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL Corporation. The TCL LinkHub Mesh Wi-Fi confctlgetmasterwlan feature is vulnerable to information disclosure, which can be exploited by attackers to cause information disclosure...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the XFree function at /src/video/x11/SDLx11yuv.c. Note: This release of the project has been deprecated in favor of a 2.0 release, and a fix version will likely not be published. Remediation A fix was pushed into the...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports the detection of ransomware and the protection of metadata, virtual environments, and other environmental data backups. A security...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports the detection of ransomware and the backup protection of metadata, virtual environments and other environmental data. A security...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports the detection of ransomware and the backup protection of metadata, virtual environments and other environmental data. A security...

CVE-2022-26307

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...

DEBIAN-CVE-2022-26307

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...

CVE-2022-26307

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...

CVE-2022-26307

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...

CVE-2022-26307

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...

UBUNTU-CVE-2022-26307

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...

LibreOffice 安全漏洞

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes the Writer text documents, Calc spreadsheets and Impress presentations applications. A security vulnerability exists in LibreOffice version 7.2 up to and including version 7.2.7, and version...

Showmax: delete the subaccount from the user id

Entry in order to delete this sub-profile, you must first create an account. then you need to find the user id and master id of the account that you will delete, you can do a brute force attempt to find it, if it holds, you can delete the child profile of this person or view a lot of information...

PT-2022-4181 · Asustor · Asustor Data Master

Name of the Vulnerable Software and Affected Versions: ASUSTOR Data Master ADM versions 3.5.9.RUE3 and below ASUSTOR Data Master ADM versions 4.0.5.RVI1 and below ASUSTOR Data Master ADM versions 4.1.0.RJD1 and below Description: A stack-based buffer overflow vulnerability was found in ASUSTOR Da...

Hardcoded credentials

The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to send SMS commands directly to the GPS tracker as if they were coming from the GPS owner’s mobile number...