8665 matches found
Tenda FH1201 security vulnerabilities
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that stems from the entries parameter of ip/goform/RouteStatic containing a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this time...
Tenda FH1201 security vulnerabilities
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a page parameter in ip/goform/NatStaticSetting, and no details of the vulnerability are provided at this time...
GO-2024-2987 Skupper uses a static cookie secret for the openshift oauth-proxy in github.com/skupperproject/skupper
Skupper uses a static cookie secret for the openshift oauth-proxy in github.com/skupperproject/skupper...
Default values of properties when creating a single-session OS static delivery group
When creating a single-session OS static delivery group, please be aware of the default values for its properties: AutomaticPowerOnForAssigned: True AutomaticPowerOnForAssignedDuringPeak: False These properties affect the behavior of assigned machines in the delivery group. Please refer to the...
CVE-2024-40348: Improper Limitation of a Pathname to a Restricted Directory
An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal...
D-Link DAP-1325 StaticAddress Command Injection Remote Code Execution Vulnerability
D-Link DAP-1325 is a wireless network extender made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network and wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a command injection remote code...
D-Link DAP-1325 StaticDefaultGateway Stack Buffer Overflow Vulnerability
D-Link DAP-1325 is a wireless access point/bridge made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network to wireless network or connect different wireless networks. The D-Link DAP-1325 suffers from a stack buffer overflow vulnerabilit...
D-Link DAP-1325 StaticDefaultGateway Command Injection Remote Code Execution Vulnerability
D-Link DAP-1325 is a wireless network extender made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network and wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a command injection remote code...
D-Link DAP-1325 SetHostIPv6StaticSettings Stack Buffer Overflow Vulnerability
D-Link DAP-1325 is a wireless access point/bridge made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network to wireless network or connect different wireless networks. The D-Link DAP-1325 suffers from a stack buffer overflow vulnerabilit...
GHSA-82M2-CV7P-4M75 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-hostpath, local-static-provisioner, spark-operator, cri-tools, aws-efs-csi-driver, ip-masq-agent, kubeflow-pipelines, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, k8s-device-plugin...
CVE-2024-5321 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-hostpath, local-static-provisioner, spark-operator, cri-tools, aws-efs-csi-driver, ip-masq-agent, kubeflow-pipelines, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, k8s-device-plugin...
CVE-2024-20323
A vulnerability in Cisco Intelligent Node iNode Software could allow an unauthenticated, remote attacker to hijack the TLS connection between Cisco iNode Manager and associated intelligent nodes and send arbitrary traffic to an affected device. This vulnerability is due to the presence of...
SUSE CVE-2022-48782
In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...
GHSA-W799-V85J-88PG Skupper uses a static cookie secret for the openshift oauth-proxy
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a...
Skupper uses a static cookie secret for the openshift oauth-proxy
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a...
CVE-2024-6535
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a...
CVE-2024-6535
A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a...
CVE-2022-48782
In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...
CVE-2022-48782
In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...
CVE-2022-48782
In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warning: Use of memory after it is freed tracemctpkeyacquirekey; ^ When mctpkeyadd fails, key is freed but then is later used in...