14548 matches found
kernel: mt76: mt7921: fix crash when startup fails.
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix crash when startup fails. If the nic fails to start, it is possible that the resetwork has already been scheduled. Ensure the work item is canceled so we do not have use-after-free crash in case cleanup is calle...
kernel: iwlwifi: mvm: check debugfs_dir ptr before use
A denial of service vulnerability was found in the Linux kernel. When debugfs is set as off in the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer, resulting in disruption to availability...
PT-2022-21770 · Mitsubishi · Mitsubishi Electric Consumer Electronics Products
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric consumer electronics products affected versions not specified Description: A cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products allows a remote unauthenticated attacker to execute a...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
No description provided...
Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15700)
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23, which can be exploited by an attacker to execute arbitrary code...
Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15701)
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC23 suffers from a buffer error vulnerability that originates from a stack overflow in the schedStartTime parameter of the setSchedWifi function. An attacker can exploit this vulnerability to run arbitrary code in the...
D-Link DIR-823G Command Injection Vulnerability (CNVD-2023-21667)
D-Link DIR-823G is a wireless router from D-Link China.D-Link DIR-823G v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via specially crafted packets...
Tenda AC23 fromSetWifiGusetBasic function buffer overflow vulnerability
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda AC23 fromSetWifiGusetBasic function, which can be exploited by an attacker to run arbitrary code in the context of an affected application...
Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-185 advisory. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by creating a confidential guest V...
Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15699)
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23, which can be exploited by an attacker to execute arbitrary code...
Tenda AC23 Stack Overflow Vulnerability
Tenda AC23 is a dual-band gigabit wireless router from Tenda, China. Tenda AC23 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary code...
Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15698)
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. The Tenda AC23 suffers from a stack overflow vulnerability that originates from a stack overflow in the wpapskcrypto parameter in the fromSetWirelessRepeat function. An attacker could exploit this vulnerability to run arbitrary...
Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15702)
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a stack overflow vulnerability, which originates from a stack overflow in the devName parameter of the ormSetDeviceName function. An attacker can exploit this vulnerability to execute arbitrary code...
Tenda AC23 缓冲区错误漏洞
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda AC23 fromSetWifiGusetBasic function, which can be exploited by an attacker to run arbitrary code in the context of an affected application...
D-Link DIR-846 has unspecified vulnerabilities
The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. A remote attacker can execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php...
Ubuntu: Security Advisory (USN-5708-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the web interface of microprogramming software for wireless access points in Moxa’s industrial systems, such as Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the microprogramming software for wireless access points like Moxa TAP-323 and Moxa TAP-213, allows a hacker to perform cross-site scripting attacks.
The vulnerability of the web interface of Moxa wireless access points for industrial systems, namely Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the wireless access points with Moxa TAP-323 and Moxa TAP-213, stems from the lack of protective measures for the web page structure...
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2686)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition in the Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free...
CVE-2022-32927
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. Joining a malicious Wi-Fi network may result in a denial-of-service of the Settings app...
USN-5708-1 backport-iwlwifi-dkms vulnerabilities
Sönke Huster discovered that an integer overflow vulnerability existed in the WiFi driver stack in the Linux kernel, leading to a buffer overflow. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-41674 Sönke Hust...