Milesight UR32L Router set_gre Code Execution

The vulnerability of the setgre function in the Milesight UR32L router’s microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router Code Execution

The vulnerability of the setikeprofile function in the Milesight UR32L router microprogramming system arises due to a buffer overflow based on a stack. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router Code Execution

The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router Code Execution

The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router set_dmvpn Code Execution

The vulnerability of the setdmvpn function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router Code Execution

The vulnerability of the setqos function in the Milesight UR32L router microprogramming system arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

L2TP Code Execution

The vulnerability of the setl2tp function in the microprogramming software for the Milesight UR32L router is caused by a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router set_dmvpn Code Execution

The vulnerability of the setdmvpn function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router set_dmvpn Code Execution

The vulnerability of the setdmvpn function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Milesight UR32L Router Code Execution

The vulnerability of the firewallhandlerset function in the Milesight UR32L router microprogramming system is caused by a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Microsoft Windows Multiple Vulnerabilities (KB5030213)

This host is missing an important security update according to Microsoft KB5030213 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function

A use-after-free vulnerability was found in fwsetparms in net/sched/clsfw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain loc...

kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nftpipaporemove function with the element, without a NFTSETEXTKEYEND. This issue could allow a local user to crash the system or potentially escalate their privileges on the system...

kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests

A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAPNETADMIN capability to crash or potentially...

kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function

A use-after-free vulnerability was found in fwsetparms in net/sched/clsfw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain loc...

CVE-2023-40942

Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...

CVE-2023-40942

Tenda AC9 V3.0BRV15.03.06.42multiTD01 was discovered stack overflow via parameter 'firewallvalue' at url /goform/SetFirewallCfg...

ASUS RT-AX56U Formatting String Error Vulnerability

The ASUS RT-AX56U is a wireless router from Asus China. The ASUS RT-AX56U suffers from a format string error vulnerability that stems from a lack of validation of specific values in its setiperf3svr.cgi module, resulting in a format string vulnerability...

CVE-2023-4244

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. Due to a race condition between nftables netlink control plane transaction and nftset element garbage collection, it is possible to underflow the reference...

DEBIAN-CVE-2023-4244

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. Due to a race condition between nftables netlink control plane transaction and nftset element garbage collection, it is possible to underflow the reference...