994 matches found
CVE-2022-43259
CVE-2022-43259 affects Tenda AC15 (v15.03.05.18). The vulnerability is a stack overflow in the timeZone parameter of the form_fast_setting_wifi_set function, caused by lack of input length validation. Impact per sources is denial of service and potential partial impact on availability. Public exp...
CVE-2022-43259
Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function...
CVE-2022-43259
Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function...
Tenda AC15 缓冲区错误漏洞
The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function that lacks length validation for input data. An attacker could exploit the vulnerabili...
CVE-2022-43259: Out-of-bounds Write
Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function...
CVE-2022-42160
D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the systemtimetimezone parameter at function SetNTPServerSettings...
PT-2022-5279 · D Link · D-Link Covr
Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1200, 1202, 1203 version 1.08 Description: The issue is related to a command injection vulnerability via the system time timezone parameter at the SetNTPServerSettings function. This vulnerability may allow a remote...
Debian dla-3135 : libdatetime-timezone-perl - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3135 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3135-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-3135)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3134-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-3134-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 03, 2022 https://wiki.debian.org/LTS -...
DLA-3135-1 libdatetime-timezone-perl - new timezone database
Bulletin has no description...
DLA-3134-1 tzdata - new timezone database
Bulletin has no description...
Command Injection in moment-timezone
Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. if Alice uses tzdata pipeline to package moment-timezone on her own for example via grunt data:2014d, where 2014d stands for the version of the tzdata to be used from IANA's website, and Alice...
GHSA-56X4-J7P9-FCF9 Command Injection in moment-timezone
Impact All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection. if Alice uses tzdata pipeline to package moment-timezone on her own for example via grunt data:2014d, where 2014d stands for the version of the tzdata to be used from IANA's website, and Alice...
6brain (>=0.0.1, <=0.0.2), 6sense (>=0.0.1, <=1.1.5) +1883 more potentially affected by unknown CVE via moment-timezone (>=0.1.0, <=0.5.34)
moment-timezone NPM version =0.1.0, =0.0.1, =0.0.1, =4.11.0, =4.13.7-rc4, =1.70.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-56X4-J7P9-FCF9...
6brain (>=0.0.1, <=0.0.2), 6sense (>=0.0.1, <=1.1.5) +1883 more potentially affected by unknown CVE via moment-timezone (>=0.1.0, <=0.5.34)
moment-timezone NPM version =0.1.0, =0.0.1, =0.0.1, =4.11.0, =4.13.7-rc4, =1.70.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V78C-4P63-2J6C...
Cleartext Transmission of Sensitive Information in moment-timezone
Impact if Alice uses grunt data or grunt release to prepare a custom-build, moment-timezone with the latest tzdata from IANA's website and Mallory intercepts the request to IANA's unencrypted ftp server, Mallory can serve data which might exploit further stages of the moment-timezone tzdata...
PT-2022-28282 · Unknown · Moment-Timezone
Name of the Vulnerable Software and Affected Versions: moment-timezone versions prior to 0.5.35 Description: The issue arises when using grunt data or grunt release to prepare a custom build of moment-timezone with the latest tzdata from IANA's website. If an attacker intercepts the request to...
