CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

Stack overflow

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2022-28972

CVE-2022-28972 affects Tenda AX1806 v1.0.0.1. A stack overflow is triggered via the timeZone parameter in the function form_fast_setting_wifi_set, leading to a Denial of Service (DoS). CVSS:3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user interaction). Other sources also...

CVE-2022-28972: Out-of-bounds Write

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

Tenda AX1806 缓冲区错误漏洞

Tenda AX1806 is a WiFi6 wireless router from Tenda China. A security vulnerability exists in the Tenda AX1806 version 1.0.0.1, which originates from a stack overflow discovered via the timeZone parameter in the formfastsettingwifiset function. An attacker can cause a denial of service DoS by...

svaiza.com Cross Site Scripting vulnerability OBB-2598767

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

D-Link DIR-823-Pro 操作系统命令注入漏洞

The D-Link DIR-823-Pro is a router from China-based AUO D-Link. The D-Link DIR-823-Pro version 1.0.2 suffers from an operating system command injection vulnerability that originates from the inclusion of a command injection vulnerability in the function SetNTPserverSeting. An attacker could explo...

The vulnerability of the timezone function in the PHP programming language interpreter allows attackers to trigger a service failure.

The vulnerability of the PHP language interpreter’s timezone function is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DLA-2963-1 tzdata - new timezone database

Bulletin has no description...

Debian DLA-2964-1 : libdatetime-timezone-perl - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2964 advisory. This update includes the changes in tzdata 2022a for the Perl bindings. For the list of changes, see DLA-2963-1. For Debian 9 stretch, this problem has been fixed in versio...

Multiple ARRIS Product Command Injection Vulnerabilities (CNVD-2022-68534)

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS USA. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the TimeZone parameter in the ntp function failing to properly filter the construct command special characters, commands,...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

Command injection

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-26991

CVE-2022-26991 concerns Arris routers SBR-AC1900P (1.0.7-B05), SBR-AC3200P (1.0.7-B05) and SBR-AC1200P (1.0.5-B05). A command-injection in the ntp function via the TimeZone parameter allows an attacker to execute arbitrary commands through a crafted request. Public sources consistently describe i...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...