CVE-2022-27016

There is a stack overflow vulnerability in the SetStaticRouteCfg function in the httpd service of Tenda AC9 15.03.2.21cn...

The vulnerability of the Node Set-value module, related to type conversion errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

UBUNTU-CVE-2022-28285

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...

The vulnerability of the set_color function in the genge.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the setcolor function in the genge.c utility for converting .fig files in Fig2dev involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure by converting the xfig file into the ge format...

多款Qualcomm产品安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A security vulnerability exists in multiple Qualcomm products that...

Setting the minter address to address(0) can lead to breaking the contract set.

Lines of code Vulnerability details Impact The highlighted issue can lead to breaking the functionality of the contract set. Proof of Concept At certain set functions in the codebase, we are allowing setting the values to address0 or the case where old address = new address. This was observed in...

PT-2022-10409 · Qualcomm · Snapdragon Connectivity +7

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

haproxy: Denial of service via set-cookie2 header

A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerabili...

CVE-2022-26278

Tenda AC9 v15.03.2.21cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...

CVE-2022-26278

Tenda AC9 v15.03.2.21cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function...

CVE-2022-26258

CVE-2022-26258 affects D-Link DIR-820L devices (firmware around 1.05B03). Multiple open‑source scanners and NVD entries describe a remote code execution (RCE) vulnerability in this model, with initial reports citing an RCE via HTTP POST to get set ccp and separate notes of an RCE via the Device N...

AZL-9698 CVE-2022-24769 affecting package moby-runc for versions less than 1.1.2-2

Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby Docker Engine prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux...

CVE-2022-27082

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

CVE-2022-27081

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo...

PT-2022-6151 · Docker +6 · Moby +7

Name of the Vulnerable Software and Affected Versions: Moby Docker Engine versions prior to 20.10.14 Description: A bug was found in Moby Docker Engine where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and...

CVE-2021-38772

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function...

protobuf-java: potential DoS in the parsing procedure for binary data

A flaw was found in protobuf-java. Google Protocol Buffer protobuf-java allows the interleaving of com.google.protobuf.UnknownFieldSet fields. By persuading a victim to open specially-crafted content, a remote attacker could cause a timeout in the ProtobufFuzzer function, resulting in a denial of...

PT-2022-7230 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.10 Description: The issue is related to the input set capability function in the Linux kernel, which can lead to an uncontrolled consumption of resources. An attacker can exploit this to cause a denial of...

OESA-2022-1578 haproxy security update

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fixes: A flaw was found i...