4825 matches found
PT-2022-36008 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to the initialization of device zone info for seeding in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
Tenda AC6 form_fast_setting_wifi_set function buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a buffer overflow vulnerability that stems from the lack of length validation of input data by the timeZone parameter in the...
USN-5747-1 bind9 vulnerabilities
It was discovered that Bind incorrectly handled large query name when using lightweight resolver protocol. A remote attacker could use this issue to consume resources, leading to a denial of service. CVE-2016-2775 It was discovered that Bind incorrectly handled large zone data size received via...
curl: bad local IPv6 connection reuse
A vulnerability was found in curl. This security flaw occurs due to errors in the logic where the config matching function did not take the IPv6 address zone id into account. This issue can lead to curl reusing the wrong connection when one transfer uses a zone id, and the subsequent transfer use...
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. The...
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. The...
CLSA-2022-1667496000 Update of tzdata
Upgrade to tzdata-2022c - Add a work-around for an awk bug in FreeBSD, macOS, etc - Improve tzselect with respect to intercontinental Zones - Chile transitions to DST on 2022-09-11, not 2022-09-04 - 'make install' now defaults LOCALTIME to Factory rather than GMT - More zones that are the same...
rubygem-tzinfo: arbitrary code execution
A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within t...
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. The...
CVE-2022-43028
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTimeCfg...
Tenda TX3 缓冲区错误漏洞
Tenda TX3 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in Tenda TX3 that originates from a stack overflow contained in the timeZone parameter of /goform/SetSysTimeCfg. No details of the vulnerability are provided at this time...
Joining new DDC to Multi-Zone CVAD Site fails
New DDC join process to a multi-zone CVAD site spread across different datacenters fails. This happens at the step when each service on the new DDC tries to register with Citrix Configuration service...
OESA-2022-1993 dhcp security update
The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: In...
D-Link COVR 命令注入漏洞
D-Link COVR is a series of routers from China-based AUO D-Link. A security vulnerability exists in D-Link COVR versions 1200, 1202, 1203 v1.08, which originates from a command injection vulnerability contained via the systemtimetimezone parameter in the function SetNTPServerSettings...
PT-2022-20302 · Unknown +2 · Zoneminder +2
Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.36.12 Description: A Stored Cross Site Scripting XSS issue allows an attacker to execute HTML or JavaScript code via the Username field when an Admin or non-Admin users that can see other users logged into the platform...
October 11, 2022—KB5018421 (OS Build 20348.1129)
None None...
October 11, 2022—KB5018419 (OS Build 17763.3532) - EXPIRED
None None...
October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED
None None...