CVE-2022-40903

CVE-2022-40903 concerns Aiphone GT-DMB-N/GT-DMB/GT-DMB-LVN and GT-DB-VN video entry systems. Connected sources describe an information disclosure vulnerability (CWE-200) allowing an attacker with access to obtain sensitive device information. The affected firmware versions are GT-DMB-N/GT-DMB/GT-...

CVE-2022-40903

Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...

CVE-2022-40903

Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...

PT-2022-23627 · Intel · Intel Nuc 10 Performance Mini Pcs +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs versions prior to FNCML357.0053 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to enable escalation of...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

Buffer overflow

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

CVE-2022-43343 concerns N-Prolog v1.91, where a global buffer overflow is reported in the function gettoken() at Main.c. The vulnerability is documented with a faulty write into a global buffer, as demonstrated by an AddressSanitizer report pointing to parser.c:1022 and noting proximity to global...

N-Prolog 安全漏洞

N-Prolog is an Arity/Prolog32-compatible interpreter and compiler from the individual developer kenichi sasagawa. A security vulnerability exists in N-Prolog v1.91, which stems from the inclusion of a global buffer overflow in the function gettoken in Main.c. The vulnerability is caused by the...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

CVE-2022-43343

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...

PT-2022-26860 · N-Prolog · N-Prolog

Name of the Vulnerable Software and Affected Versions: N-Prolog version 1.91 Description: A global buffer overflow issue was found in the gettoken function at Main.c. Recommendations: For N-Prolog version 1.91, consider disabling the gettoken function as a temporary workaround until a patch is...

n-story.jp Cross Site Scripting vulnerability OBB-3013490

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42233

Tenda 11N with firmware version V5.07.33cn suffers from an Authentication Bypass vulnerability...

Tenda 11N 授权问题漏洞

Tenda 11N is a router from Tenda, a Chinese company. A security vulnerability exists in the Tenda 11N version V5.07.33cn, which can be exploited to bypass login authentication...

Open-Source Intelligence to Understand the Scope of N-Day Vulnerabilities

Open-Source Intelligence to Understand the Scope of N-Day Vulnerabilities By Charles McFarland · September 21, 2022 The zero-day is the holy grail for cybercriminals; However, N-day vulnerabilities can pose problems even years after discovery. If a target is vulnerable, it doesn’t matter whether...

Open-Source Intelligence to Understand the Scope of N-Day Vulnerabilities

Open-Source Intelligence to Understand the Scope of N-Day Vulnerabilities By Charles McFarland · September 21, 2022 The zero-day is the holy grail for cybercriminals; However, N-day vulnerabilities can pose problems even years after discovery. If a target is vulnerable, it doesn’t matter whether...

PT-2022-33221 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19.2 through v5.19.8 Description: The issue is related to the n gsm component in the Linux Kernel, where sleeping functions are called from an atomic context. This could potentially lead to security vulnerabilities,...

Ubuntu: Security Advisory (USN-2024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Alt-N MDaemon 跨站脚本漏洞

Alt-N MDaemon is a mail service system from Alt-N Corporation that provides complete mail server functionality, protects users from spam, enables web login to send and receive emails, supports remote management, and protects the system against email viruses when used in conjunction with the MDaem...