17951 matches found
Huawei EulerOS: Security Advisory for uboot-tools (EulerOS-SA-2022-2422)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : cifs-utils (EulerOS-SA-2022-2547)
According to the versions of the cifs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to...
EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2483)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...
EulerOS Virtualization 3.0.6.6 : cifs-utils (EulerOS-SA-2022-2489)
According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to...
EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-2422)
According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the 'i2c md' command enables th...
EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-2451)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2124 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-2435)
According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the 'i2c md' command enables the...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2436)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-1898, CVE-2022-2042 - Heap-based Buffer Overflow in GitHub repository vim/vim...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2423)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-1898, CVE-2022-2042 - Heap-based Buffer Overflow in GitHub repository vim/vim...
CVE-2022-40160: Stack-based Buffer Overflow
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
CVE-2022-40159: Stack-based Buffer Overflow
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
PT-2022-7011
Name of the Vulnerable Software and Affected Versions D-Link DAP-1325 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The specific flaw exists within the handling of XML data...
PT-2022-7014
Name of the Vulnerable Software and Affected Versions D-Link DAP-1325 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. The specific flaw exists within the handling of XML data...
PT-2022-7012
Name of the Vulnerable Software and Affected Versions D-Link DAP-1325 affected versions not specified Description The issue is related to a stack-based buffer overflow in the SetHostIPv6StaticSettings function when handling the StaticDefaultGateway parameter. This can be exploited by a remote...
PT-2022-7013
Name of the Vulnerable Software and Affected Versions D-Link DAP-1325 affected versions not specified Description The issue is related to a stack-based buffer overflow in the SetHostIPv6StaticSettings function when handling the StaticDNS1 parameter. This can allow a remote attacker to execute...
CVE-2022-3324 Stack-based Buffer Overflow in vim/vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...
CVE-2022-3324
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598...
CVE-2022-23006: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability was found on Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi that could allow an attacker accessing the system locally to read information from /etc/version file. This vulnerability can only be exploited by chaining it with another...
