10380 matches found
EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2022-1828)
According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged...
CVE-2018-25034
A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input alert1 as part of POST Request leads to basic...
THOMSON TCW710 跨站脚本漏洞
The THOMSON TCW710 is a set-top box from THOMSON Canada. A security vulnerability exists in the THOMSON TCW710 ST5D.10.05 version, which originates from an unknown section of the file /goform/RgDhcp. A remote attacker can exploit the vulnerability to cause a stored cross-site scripting attack usi...
PT-2022-8046 · Thomson · Thomson Tcw710
Name of the Vulnerable Software and Affected Versions: Thomson TCW710 version ST5D.10.05 Description: A problematic issue has been found in the processing of the file /goform/wlanPrimaryNetwork. The manipulation of the ServiceSetIdentifier argument with the input alert1 as part of a POST Request...
THOMSON TCW710 跨站脚本漏洞
Thomson Reuters THOMSON TCW710 is a set-top box from Thomson Reuters Canada. A cross-site scripting vulnerability exists in the THOMSON TCW710 ST5D.10.05 version, which originates from certain unknown processing in the file /goform/wlanPrimaryNetwork. A remote attacker could use this vulnerabilit...
CVE-2022-30918
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AspSetTelnet parameter at /goform/aspForm...
OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...
CVE-2021-42884
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack...
PT-2022-11729 · Totolink · Totolink Ex1200T
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue concerns a remote command injection vulnerability. It is located in the setDeviceMac function of the global.so file, allowing control over the deviceName to launch an attack...
PT-2022-19822
Name of the Vulnerable Software and Affected Versions AlekSIS-Core versions 2.8.1 and below Description An access control issue in aleksis/core/util/auth helpers.py, specifically in the ClientProtectedResourceMixin, allows attackers to access arbitrary scopes if no allowed scopes are specifically...
CVE-2022-30503
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njssetnumber at src/njsvalue.h...
kernel: security regression for CVE-2018-13405
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...
mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries
MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...
PT-2022-3342 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the Linux kernel's nft set desc concat parse function allows an attacker to trigger a buffer overflow, causing a denial of service and possibly allowing the execution of...
OESA-2022-1681 mariadb security update
MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...
DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash
A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd does not validate msg-payload.inflight.numqueues, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability...
Cisco RV340 JSON RPC set-snmp Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling o...
CVE-2022-30477
Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request...