CVE-2022-2892

Measuresoft ScadaPro Server Versions prior to 6.8.0.1 uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file...

TOTOLINK A810R 操作系统命令注入漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK A810R version V5.9c.4050B20190424, which stems from a command injection vulnerability via the included component downloadFile.cgi...

TRENDnet TEW-733GR 代码注入漏洞

The TRENDnet TEW-733GR is a router from TRENDnet, Inc. A code injection vulnerability exists in TRENDnet TEW733GR v1.03B01, which originates from /htdocs/upnpinc/gena.php contains command injection...

PT-2022-23607 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR845L version A1 Description: The issue concerns an authentication vulnerability. It can be exploited via an AUTHORIZED GROUP=1 value. This is demonstrated by sending a request for "getcfg.php", an API endpoint. Recommendations: For...

PT-2022-24432 · Tenda · Tenda Tx9 Pro

Name of the Vulnerable Software and Affected Versions: Tenda TX9pro version V22.03.02.10 Description: A buffer overflow issue was discovered in the httpd/SetNetControlList component. Recommendations: For Tenda TX9pro version V22.03.02.10, at the moment, there is no information about a newer versi...

PT-2022-23549 · Unknown · Simple Task Scheduling System

Name of the Vulnerable Software and Affected Versions: Simple Task Scheduling System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete schedule" endpoint. Recommendations: F...

PT-2022-23808 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetAPWifiorLedInfoById. Recommendations: For H3C H200 version H200V100R004, consider disabling the SetAPWifiorLedInfoById function as a temporar...

Tenda AC1206 缓冲区错误漏洞

Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the formWifiWpsOOB function. An attacker could exploit this vulnerability to overflow the buffer...

TOTOLINK N350RT 缓冲区错误漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from a command parameter stack overflow issue in the setTracerouteCfg method...

Tenda AC1206 缓冲区错误漏洞

Tenda AC1206 is a wireless pass-through king gigabit router from Tenda China. Tenda AC1206 version V15.03.06.23 is vulnerable to a buffer overflow vulnerability, which is caused by improper boundary checking of the fromSysTime function. An attacker could exploit this vulnerability to overflow the...

Information disclosure

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users...

CVE-2022-33900 WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability in Easy Digital Downloads plugin = 3.0.1 at WordPress...

PT-2022-4345 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

PT-2022-23501 · Yimioa · Yimioa

Name of the Vulnerable Software and Affected Versions: Yimioa version 6.1 Description: A SQL injection issue was found in Yimioa via the orderbyGET parameter. This allows for potential manipulation of database queries. Recommendations: For Yimioa version 6.1, consider restricting access to the...

StreamLabs Desktop Application 安全漏洞

StreamLabs Desktop Application is a free live streaming and recording software from StreamLabs USA. A security vulnerability exists in StreamLabs Desktop Application version 1.9.0, which stems from the presence of incorrect access control via obs64.exe, and allows an attacker to execute arbitrary...

macOS 12.x < 12.5.1 (HT213413)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.5.1 Monterey. It is, therefore, affected by multiple vulnerabilities : - An out-of-bound write issue in Webkit that may lead to arbitrary code execution when processing maliciously crafted web content. CVE-2022-3289...

CVE-2022-35473

OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6171b2 file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a heap buffer overflow in the /release-x64/otfccdump+0x6b84b1 file...

PT-2022-23234 · Tifig · Tifig

Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A resource allocation issue was discovered in tifig via operator newunsigned long at asan new delete.cpp. Recommendations: For tifig version 0.2.2, at the moment, there is no information about a newer version...