14371 matches found
CVE-2023-23559
In rndisqueryoid in drivers/net/wireless/rndiswlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition...
Weak password vulnerability in TOTOLINK N300RH V4
The TOTOLINK N300RH V4 is a wireless router. The TOTOLINK N300RH V4 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...
Linux kernel 输入验证错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.1.5 and earlier, which stems from an integer overflow in rndisqueryoid in drivers/net/wireless/rndiswlan.c. The...
CVE-2023-23559
In rndisqueryoid in drivers/net/wireless/rndiswlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition...
Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2023-1171)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ZTE MF286R Command Injection Vulnerability
The ZTE MF286R is a wireless router from China's ZTE Corporation ZTE. A command injection vulnerability exists in the ZTE Mobile MF286R NordicMF286RB06, which stems from insufficient validation of input parameters and can be exploited by an attacker to execute arbitrary commands...
Linksys WRT54GL Buffer Overflow Vulnerability
The Linksys WRT54GL is a wireless router from Linksys USA. A buffer overflow vulnerability exists in the Linksys WRT54GL Wireless-G Broadband Router. The vulnerability stems from a boundary error in the StartEPI function in the httpd binary when handling untrusted input, and can be exploited by a...
Linksys WRT54GL Denial of Service Vulnerability
The Linksys WRT54GL is a wireless router from Linksys USA. A denial of service vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router version 4.30.18.006 and prior versions, which stems from the presence of a null pointer dereference in the soapaction function in the upnp binary. An...
EulerOS Virtualization 2.10.1 : linux-firmware (EulerOS-SA-2023-1150)
According to the versions of the linux-firmware package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated...
Linksys WUMC710 Command Injection Vulnerability
The Linksys WUMC710 is a universal media connector from Linksys USA. A command injection vulnerability exists in the Linksys WUMC710 Wireless-AC Universal Media Connector version 1.0.02 build3 and prior versions. The vulnerability stems from the dosetNTP function in the httpd binary that uses...
USN-5793-3: Linux kernel vulnerabilities
It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-3910 ...
CVE-2022-36443
An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels wireless and SD card but it is still possible to use a physical connection Ethernet cable without restriction...
EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-1223)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to...
EulerOS Virtualization 2.10.0 : linux-firmware (EulerOS-SA-2023-1171)
According to the versions of the linux-firmware package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated...
Null pointer dereference
A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A null pointer dereference in the soapaction function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the...
Remote code execution
An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. The CheckTSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges...
CVE-2022-43970
The CVE-2022-43970 entry refers to a stack-based buffer overflow in the httpd binary of Linksys WRT54GL Wireless-G Broadband Router (firmware ≤ 4.30.18.006). The Start_EPI function handles untrusted input, enabling an authenticated administrator to execute arbitrary commands as root on the underl...
CVE-2022-43971
CVE-2022-43971 affects Linksys WUMC710 Wireless-AC Universal Media Connector (firmware
USN-5793-1: Linux kernel vulnerabilities
It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-3910 ...
