10441 matches found
DEBIAN-CVE-2023-6817
A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nftpipapowalk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO Pile Packet Policies elements, leadi...
Code Injection
hono is vulnerable to Code Injection. The vulnerability is due to gHSets method lacking isolation in the handler set parameters for each request. An attacker can potentially exploit this by overriding named path parameters from previous requests, leading to unintended parameter usage in subsequen...
ALPINE-CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
avahi: Reachable assertion in dbus_set_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...
CVE-2023-49938
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7...
cJSON Security Vulnerabilities
cJSON is a lightweight open source JSON parser. A security vulnerability exists in cJSON v1.7.16, which stems from a function cJSONSetValuestring in cJSON.c that contains a segmentation violation...
Microsoft releases lightest Patch Tuesday in three years, no zero-days disclosed
Microsofts monthly security update released Tuesday is the companys lightest in four years, including only 33 vulnerabilities. Perhaps more notable is that there are no zero-day vulnerabilities included in Decembers Patch Tuesday, a rarity for Microsoft this year. The companys regular set of...
PT-2024-14638
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL pointer dereference in the wfx set mfp ap function has been resolved. The ieee80211 beacon get function can return NULL, and wfx set mfp ap should check the return value...
The vulnerability of the SetFirewallCfg() function in the Tenda AC10 router’s microprogramming software allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the SetFirewallCfg function in the Tenda AC10 router microprogramming system is related to the issue where the operation’s output goes beyond the buffer boundaries in memory when processing the firewallEn parameter. Exploiting this vulnerability allows a remote attacker to...
CVE-2023-49417
TOTOLink A7000R V9.1.0u.6115B20201022 has a stack overflow vulnerability via setOpModeCfg...
Tenda AX12 /goform/SetVirtualServerCfg interface list parameter buffer overflow vulnerability
Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the list parameter at /goform/SetVirtualServerCfg that fails to...
The vulnerability of the setDeviceInfo() function in Tenda AX9 Wi-Fi routers allows a hacker to execute arbitrary commands.
The vulnerability of the setDeviceInfo function in Tenda AX9 Wi-Fi routers’ microprogramming software is related to the lack of measures taken to protect the SQL query structure when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Tenda AX12 /goform/SetStaticRouteCfg interface list parameter buffer overflow vulnerability
Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a buffer overflow vulnerability that stems from the list parameter of /goform/SetStaticRouteCfg failing to properly valida...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability that originates from the discovery that dpllpinparentpinset in drivers/dpll/dpllnetlink.c contains a null pointer...
CVE-2023-49408
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...
CVE-2023-49408
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function setdevicename...
CVE-2023-49410
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...
CVE-2023-49410
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...