107 matches found
Stack overflow
TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function resetCloudPwdRegister...
CVE-2023-46537
TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister...
CVE-2023-46539
TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle...
CVE-2023-46534
TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin was discovered to contain a stack overflow via the function modifyAccPwdRegister...
CVE-2023-46520
The TP-LINK TL-WR886N firmware version 7.0 3.0.14 Build 221115 Rel.56908n.bin contains a stack overflow in uninstallPluginReqHandle. The issue may allow a remote attacker to execute arbitrary code. A purported workaround suggested by PT-Security is to disable uninstallPluginReqHandle until a patc...
CVE-2023-46522
Summary: CVE-2023-46522 affects TP-LINK TL-WR886N (v7.0 3.0.14 Build 221115 Rel.56908n.bin) and TL-WDR7660 (2.0.30), due to a stack overflow in the deviceInfoRegister function. This is caused by a buffer overflow that can allow reading beyond allocated memory. Some sources suggest a remote attack...
CVE-2023-46537
Affected product: TP-LINK TL-WR886N router (firmware version 7.0 3.0.14 Build 221115 Rel.56908n.bin). Vulnerability: stack overflow in the getRegVeriRegister() function of the device firmware. The issue is described as a stack overflow that could potentially be exploited by an external attacker. ...
CVE-2023-46534
The vulnerability CVE-2023-46534 affects TP-LINK TL-WR886N, specifically version 7.0 3.0.14 Build 221115 Rel.56908n.bin. A stack overflow in the modifyAccPwdRegister() function is the root cause. Impact is stated as high/critical, affecting confidentiality, integrity, and availability. The affect...
CVE-2023-46526
The CVE-2023-46526 entry affects TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin, with a stack overflow in the resetCloudPwdRegister function. Multiple sources describe a buffer overflow in this method, enabling potential arbitrary code execution. Public scores indicate critical impact ...
CVE-2023-32635
XBRL data create application version 7.0 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker...
Siemens SICAM PAS/PQS Sensitive Information Plaintext Transfer Vulnerability
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 due to the affected software transmitting database credentials for the built-in SQL server in clear...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
Memory corruption
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID...
CVE-2022-33105
CVE-2022-33105 affects Redis v7.0 where a memory leak is triggered by the streamGetEdgeID component. The issue is fixed in Redis 7.0.5 and newer; upgrading to a patched release (≥7.0.5) is recommended. The CVSS metrics in the public entry indicate a network-accessible issue with high impact on av...