CVE-2022-41560

The Statement Set Upload via the Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a Denial of Service Attack on the affected system. Affected releases are TIBCO Software...

TIBCO Software Nimbus security vulnerabilities

TIBCO Software Nimbus is a business application for process documentation from TIBCO Software, USA. A security vulnerability in TIBCO Software Nimbus version 10.5.0, which originates from a problem with the Web Client Upload Report Set component, allows a low-privileged attacker with network acce...

CVE-2022-42777: Missing Authorization

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...

CVE-2022-39095: Missing Authorization

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...

DEBIAN-CVE-2022-32221

When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...

Relayer/executor-already-set Error in CrossChainRelayerArbitrum Contract

Lines of code Vulnerability details Summary The setExecutor function in the CrossChainRelayerArbitrum contract improperly reverts when the executor variable has already been set. Impact This bug could prevent the CrossChainRelayerArbitrum contract from properly setting the executor variable,...

PT-2025-38011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the do floppy init function within the Linux kernel. The leak occurs when floppy alloc disk fails during initialization, specifically when allocating disk...

CVE-2022-45654

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the ssid parameter in the formfastsettingwifiset function...

CVE-2022-45650

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function...

CVE-2022-44367

Tenda i21 V1.0.0.144656 is vulnerable to Buffer Overflow via /goform/setUplinkInfo...

Tenda AC6 security vulnerabilities

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a buffer overflow vulnerability that stems from the lack of length validation of input data by the timeZone parameter in the...

Tenda i21 buffer error vulnerability

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version V1.0.0.144656, which was discovered to contain a stack overflow vulnerability via /goform/setSysPwd...

PT-2022-27616 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability. It occurs via the fromSysToolRestoreSet function. Recommendations: For Tenda AC6V1.0 version 15.03.05.19, as a temporary...

PT-2022-27604 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the time parameter in the setSmartPowerManagement function. This issue can be exploited, potentially leading to unintended consequences. Recommendations...

Tenda i22 security vulnerabilities

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterSet function. An attacker could exploit this vulnerability to cause a denial ...

Tenda i21 buffer error vulnerability

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version V1.0.0.144656, which originates from vulnerability to /goform/setUplinkInfo buffer overflow...

PT-2022-27603 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the schedStartTime parameter in the setSchedWifi function. This issue can be exploited, potentially allowing for unauthorized access or control...

CVE-2021-25949

A prototype pollution vulnerability was found in ‘set-getter’. This issue allows an attacker to cause a denial of service and may also lead to remote code execution...

ASB-A-179725730

In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...

Android ProxyResolverV8 SetPacScript Code Execution

The vulnerability of the ProxyResolverV8::SetPacScript function proxyresolverv8.cc in Android operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...