Total
11736 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-36466 | 1 Totolink | 2 A3700r, A3700r Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. | |||||
CVE-2022-36465 | 1 Totolink | 2 A3700r, A3700r Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. | |||||
CVE-2022-36480 | 1 Totolink | 2 N350rt, N350rt Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. | |||||
CVE-2022-36463 | 1 Totolink | 2 A3700r, A3700r Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg. | |||||
CVE-2022-36488 | 1 Totolink | 2 N350rt, N350rt Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. | |||||
CVE-2022-36464 | 1 Totolink | 2 A3700r, A3700r Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules. | |||||
CVE-2022-36483 | 1 Totolink | 2 N350rt, N350rt Firmware | 2022-08-26 | N/A | 7.8 HIGH |
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter. | |||||
CVE-2022-37074 | 1 H3c | 2 Gr-1200w Firmware, Gr-120w | 2022-08-26 | N/A | 7.8 HIGH |
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set. | |||||
CVE-2022-25903 | 1 Opcua Project | 1 Opcua | 2022-08-26 | N/A | 7.5 HIGH |
The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed. | |||||
CVE-2022-37816 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2022-08-25 | N/A | 9.8 CRITICAL |
Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind. | |||||
CVE-2021-21824 | 1 Accusoft | 1 Imagegear | 2022-08-24 | 7.5 HIGH | 9.8 CRITICAL |
An out-of-bounds write vulnerability exists in the JPG Handle_JPEG420 functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2021-21821 | 1 Accusoft | 1 Imagegear | 2022-08-24 | 7.5 HIGH | 9.8 CRITICAL |
A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2020-28598 | 1 Prusa3d | 1 Prusaslicer | 2022-08-24 | 6.8 MEDIUM | 7.8 HIGH |
An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2020-28592 | 1 Cosori | 2 Cs158-af, Cs158-af Firmware | 2022-08-24 | 7.5 HIGH | 9.8 CRITICAL |
A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote code execution. An attacker can send a malicious packet to trigger this vulnerability. | |||||
CVE-2022-37175 | 1 Tenda | 2 Ac15, Ac15 Firmware | 2022-08-23 | N/A | 9.8 CRITICAL |
Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet. | |||||
CVE-2022-25972 | 1 Hdfgroup | 1 Hdf5 | 2022-08-23 | N/A | 7.8 HIGH |
An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2022-26061 | 1 Hdfgroup | 1 Hdf5 | 2022-08-23 | N/A | 7.8 HIGH |
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. | |||||
CVE-2022-35012 | 1 Pngdec Project | 1 Pngdec | 2022-08-22 | N/A | 6.5 MEDIUM |
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp. | |||||
CVE-2022-35010 | 1 Pngdec Project | 1 Pngdec | 2022-08-22 | N/A | 6.5 MEDIUM |
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp. | |||||
CVE-2022-35007 | 1 Pngdec Project | 1 Pngdec | 2022-08-22 | N/A | 6.5 MEDIUM |
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc. |