10372 matches found
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...
PT-2022-6568
Name of the Vulnerable Software and Affected Versions Python Charmers Future versions 0.18.2 and earlier Description The issue is related to improper input validation when handling the Set-Cookie header, allowing a remote attacker to send a specially crafted HTTP request and perform a denial of...
Fedora 36 : mod_security / mod_security_crs (2022-90708b46e3)
The remote Fedora 36 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-90708b46e3 advisory. - version update - security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...
The vulnerability of the amvdec_set_canvases() function in the Linux kernel’s drivers/staging/media/meson/vdec/vdec_helpers.c file allows a hacker to cause a service failure or gain increased privileges.
The vulnerability of the amvdecsetcanvases function in the drivers/staging/media/meson/vdec/vdechelpers.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause service failures or gain increased privileges...
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...
PT-2022-17590 · Vm2 · Vm2
Name of the Vulnerable Software and Affected Versions: vm2 versions prior to 3.9.10 Description: The issue is related to Arbitrary Code Execution due to the usage of prototype lookup for the WeakMap.prototype.set method. This allows access to a host object and can lead to a sandbox compromise...
CVE-2022-46535
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState...
CVE-2022-46536
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState...
CVE-2022-46533
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState...
CVE-2022-46539
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security5g parameter at /goform/WifiBasicSet...
CVE-2022-23536
A local file inclusion vulnerability exists in Cortex. This issue could allow a malicious actor to remotely read local files as a result of parsing maliciously crafted Alertmanager configurations when submitted to the Alertmanager Set Configuration API...
PT-2022-27891 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered in the security parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...
Tenda F1203 安全漏洞
The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in Tenda F1203 firmware version V2.0.1.6, which stems from the limitSpeedUp parameter of its /goform/SetClientState component that allows an attacker to achieve a buffer overflow...
Tenda F1203 安全漏洞
The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from a limitSpeed parameter in its /goform/SetClientState component that allows an attacker to achieve a buffer overflow...
PT-2022-27893 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered, which can be triggered via the security 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, avoid using th...
An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference.
...
CVE-2022-42515
In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
PT-2022-14798 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a logic error in the code of ppmpu set in ppmpu.c, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...