894 matches found
CVE-2022-43259
CVE-2022-43259 affects Tenda AC15 (v15.03.05.18). The vulnerability is a stack overflow in the timeZone parameter of the form_fast_setting_wifi_set function, caused by lack of input length validation. Impact per sources is denial of service and potential partial impact on availability. Public exp...
Tenda AC15 缓冲区错误漏洞
The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function that lacks length validation for input data. An attacker could exploit the vulnerabili...
CVE-2022-42160
D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter at function SetNTPServerSettings...
PT-2022-5279 · D Link · D-Link Covr
Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1200, 1202, 1203 version 1.08 Description: The issue is related to a command injection vulnerability via the system time timezone parameter at the SetNTPServerSettings function. This vulnerability may allow a remote...
Debian dla-3135 : libdatetime-timezone-perl - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3135 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3135-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-3135)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3134-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-3134-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 03, 2022 https://wiki.debian.org/LTS -...
DLA-3135-1 libdatetime-timezone-perl - new timezone database
Bulletin has no description...
DLA-3134-1 tzdata - new timezone database
Bulletin has no description...
GHSA-56X4-J7P9-FCF9 Command Injection in moment-timezone
Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. if Alice uses tzdata pipeline to package moment-timezone on her own for example via grunt data:2014d, where 2014d stands for the version of the tzdata to be used from IANA's website, and Alice...
Command Injection in moment-timezone
Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. if Alice uses tzdata pipeline to package moment-timezone on her own for example via grunt data:2014d, where 2014d stands for the version of the tzdata to be used from IANA's website, and Alice...
Cleartext Transmission of Sensitive Information in moment-timezone
Impact if Alice uses grunt data or grunt release to prepare a custom-build, moment-timezone with the latest tzdata from IANA's website and Mallory intercepts the request to IANA's unencrypted ftp server, Mallory can serve data which might exploit further stages of the moment-timezone tzdata...
PT-2022-28282 · Unknown · Moment-Timezone
Name of the Vulnerable Software and Affected Versions: moment-timezone versions prior to 0.5.35 Description: The issue arises when using grunt data or grunt release to prepare a custom build of moment-timezone with the latest tzdata from IANA's website. If an attacker intercepts the request to...
CVE-2022-37819
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...
CVE-2022-37819
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...
CVE-2022-37819
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...
Stack overflow
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...
CVE-2022-37819
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime...
CVE-2022-37819
CVE-2022-37819 affects Tenda AX1803 v1.0.0.1. A stack overflow is triggered in the fromSetSysTime() function via the timezone parameter, due to improper boundary checking. Reported impacts include potential arbitrary code execution or denial of service; exploitability is described as local with l...
PT-2022-24097 · Tenda · Tenda Ax1803
Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A stack overflow issue was discovered in the Tenda AX1803, specifically via the timezone parameter in the fromSetSysTime function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider restricti...