994 matches found
rubygem-tzinfo: arbitrary code execution
A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within t...
Debian: Security Advisory (DLA-3162)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3162-1] libdatetime-timezone-perl new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-3162-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 26, 2022 https://wiki.debian.org/LTS -...
[SECURITY] [DLA 3161-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-3161-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 26, 2022 https://wiki.debian.org/LTS -...
DLA-3162-1 libdatetime-timezone-perl - new timezone database
Bulletin has no description...
DLA-3161-1 tzdata - new timezone database
Bulletin has no description...
java-11-openjdk security and bug fix update
1:11.0.17.0.8-2.0.1 - link atomic for ix86 build 1:11.0.17.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on...
java-11-openjdk security and bug fix update
11.0.17.0.8-2.0.1 - Replace upstream references Orabug: 34340155 1:11.0.17.0.8-2 - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv JDK-8293834 - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public A...
Tenda AC15 Buffer Overflow Vulnerability (CNVD-2023-43065)
The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function that lacks length validation for input data. An attacker could exploit the vulnerabili...
Unspecified vulnerability in Tenda TX3 (CNVD-2022-70578)
Tenda TX3 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda TX3 that originates from a stack overflow contained in the timeZone parameter of /goform/SetSysTimeCfg. No details of the vulnerability are provided at this time...
CVE-2022-43028
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...
Stack overflow
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...
CVE-2022-43028: Out-of-bounds Write
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...
CVE-2022-43028
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...
PT-2022-26712 · Tenda · Tenda Tx3
Name of the Vulnerable Software and Affected Versions: Tenda TX3 version US TX3V1.0br V16.03.13.11 multi TDE01 Description: A stack overflow issue was discovered via the timeZone parameter at the "/goform/SetSysTimeCfg" API endpoint. Recommendations: For Tenda TX3 version US TX3V1.0br V16.03.13.1...
CVE-2022-43028
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...
CVE-2022-43028
The CVE-2022-43028 entry concerns Tenda TX3, specifically the US_TX3V1.0br_V16.03.13.11_multi_TDE01 build, which is affected by a stack overflow via the timeZone parameter in the /goform/SetSysTimeCfg API. The vulnerability is a stack overflow (no details on root cause beyond the parameter and en...
CVE-2022-43259
Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function...