CVEs published February 4, 2022
219 CVEs were published on February 4, 2022: 6 critical, 40 high.
- Published
- 219
- Critical
- 6
- High
- 40
- Medium
- 34
- Low
- 4
- Unrated
- 135
- Now in CISA KEV
- 0
- Fix available
- 67
Most affected products
- tensorflow · tensorflow-cpu +1
- 26
- Sealevel
- 10
- tensorflow · tensorflow-gpu +1
- 10
- Acronis Cyber Protect Home Office · Acronis True Image
- 4
- ABB SPIET800 · ABB PNI800
- 3
- EcoStruxure Power Monitoring Expert
- 3
- kernel
- 3
- Acronis Cyber Protect · Acronis Agent +1
- 2
- Apache Software Foundation Apache Gobblin · org.apache.gobb…
- 2
- bildsben iTunesRPC-Remastered
- 2
Critical 6
- CVE-2022-22987Advantech ADAM-3600Advantech ADAM-3600
- CVE-2022-0365Ricon Mobile, Inc.Ricon Industrial Cellular Router
- CVE-2021-21962A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21961A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21960A stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-40401A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd)Gerbv
High 40
- CVE-2022-23609Path traveresal in iTunesRPC-Remasteredbildsben iTunesRPC-Remastered
- CVE-2022-23611OS command injection in iTunesRPC-Remasteredbildsben iTunesRPC-Remastered
- CVE-2022-23561Out of bounds write in TFLitetensorflow · tensorflow-cpu +1
- CVE-2022-23558Integer overflow in TFLite array creationtensorflow · tensorflow-gpu +1
- CVE-2022-23562Integer overflow in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23563Insecure temporary file in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23559Integer overflow in TFLitetensorflow · tensorflow-cpu +1
- CVE-2022-23560Read and Write outside of bounds in TFLitetensorflow · tensorflow-cpu +1
- CVE-2022-23574Out of bounds read and write in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23566Out of bounds write in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23573Uninitialized variable access in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23584Use after free in `DecodePng` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23587Integer overflow in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23592Out of bounds read in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23594Out of bounds read in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23591Stack overflow in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-0472Unrestricted Upload of File with Dangerous Type in jsdecena/laracomjsdecena/laracom
- CVE-2020-7534A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unautModicon M340 CPUs: BMXP34 (All Versions), Modicon Quantum C…
- CVE-2021-28503In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.Arista Networks Arista EOS
- CVE-2022-0218WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Routecodemiq WP HTML Mail
- CVE-2021-22284SECURITY - OPC Server for AC 800M - Remote Code Execution VulnerabilityABB 800xA, Control Software for AC 800M OPC Server for A… +1
- CVE-2022-0484Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programsMirantis Container Cloud Lens Extension
- CVE-2021-22285SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface moduleABB SPIET800 · ABB PNI800
- CVE-2021-22288SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface moduleABB SPIET800 · ABB PNI800
- CVE-2021-22286SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface moduleABB SPIET800 · ABB PNI800
- CVE-2021-44779WordPress [GWA] AutoResponder plugin <= 2.3 - Unauthenticated SQL Injection (SQLi) vulnerabilityG.J.P. [GWA] AutoResponder
- CVE-2021-21968A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21959A misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-40420A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.Foxit
- CVE-2022-22150A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543.Foxit
- CVE-2021-21964A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21965A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21963An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc.Sealevel
- CVE-2022-23947A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsing functionality of KiCad EDA 6KiCad
- CVE-2022-23946A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6KiCad
- CVE-2022-23614Code injection in Twigtwigphp Twig · twig/twig
- CVE-2021-32732Cross-Site Request Forgery in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-administ…
- CVE-2021-23507Prototype Pollutionobject-path-set
- CVE-2021-23470Prototype Pollutionputil-merge
- CVE-2021-23497Prototype Pollution@strikeentco/set
Medium, low and unrated 173
- CVE-2021-32036Denial of Service and Data Integrity vulnerability in features commandMongoDB Server
- CVE-2021-38960IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information.IBM OPENBMC · IBM HMC
- CVE-2018-25029The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radioSilicon Labs Z-Wave
- CVE-2013-20003Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowSilicon Labs Z-Wave · Sierra Designs Z-Wave
- CVE-2022-0317Improper Input Validation in AKPublic.Verify in go-attestationGoogle go-attestation · github.com/google/go-attestation
- CVE-2022-23913Apache ActiveMQ Artemis DoSApache Software Foundation Apache ActiveMQ Artemis · org.ap…
- CVE-2022-0481NULL Pointer Dereference in mruby/mrubymruby/mruby
- CVE-2022-23805A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local atTrend Micro Worry-Free Business Security
- CVE-2021-36152Insecure TrustManager used in LDAP connectionsApache Software Foundation Apache Gobblin · org.apache.gobb…
- CVE-2021-36151Local Credentials Disclosure VulnerabilityApache Software Foundation Apache Gobblin · org.apache.gobb…
- CVE-2022-23557Division by zero in TFLitetensorflow · tensorflow-cpu +1
- CVE-2022-23570Null-dereference in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23564Reachable Assertion in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23565`CHECK`-failures in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23571Reachable Assertion in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23577Null-dereference in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23578Memory leak in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23572Crash when type cannot be specialized in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23585Memory leak in decoding PNG images in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23579`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23580Abort caused by allocating a vector that is too large in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23581`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23575Integer overflow in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23576Integer overflow in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23588`CHECK`-fails due to attempting to build a reference tensor in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23589Null pointer dereference in Grappler's `IsConstant` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23586Multiple `CHECK`-fails in `function.cc` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23583`CHECK`-failures in binary ops in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23582`CHECK`-failures in `TensorByteSize` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23595Null pointer dereference in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-23590Crash due to erroneous `StatusOr` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23593Segfault in `simplifyBroadcast` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23600Limited ability to spoof SAML authentication with missing audience verificationfleetdm fleet · github.com/fleetdm/fleet/v4
- CVE-2022-23605Expired Ephemeral Messages not reliably removed in wire-webappwireapp wire-webapp
- CVE-2021-39021IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is oIBM Security Guardium Data Encryption
- CVE-2021-43841XSS by SVG upload in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-oldco… +1
- CVE-2022-22804A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authEcoStruxure Power Monitoring Expert
- CVE-2022-22726A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users thEcoStruxure Power Monitoring Expert
- CVE-2022-22727A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact EcoStruxure Power Monitoring Expert
- CVE-2022-22725A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and Easergy P3
- CVE-2022-22724A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), Modicon M340 CPUs: BMXP34
- CVE-2022-22723A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and Easergy P5
- CVE-2022-22722A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure.Schneider Electric Easergy P5
- CVE-2021-44206Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder serviceAcronis Cyber Protect Home Office · Acronis True Image
- CVE-2021-44204Local privilege escalation via named pipe due to improper access control checksAcronis Cyber Protect · Acronis Agent +1
- CVE-2022-24114Local privilege escalation due to race condition on application startupAcronis Cyber Protect Home Office · Acronis True Image
- CVE-2021-44205Local privilege escalation due to DLL hijacking vulnerabilityAcronis Cyber Protect Home Office · Acronis True Image
- CVE-2022-24115Local privilege escalation due to unrestricted loading of unsigned librariesAcronis Cyber Protect Home Office · Acronis True Image
- CVE-2022-24113Local privilege escalation due to excessive permissions assigned to child processesAcronis Cyber Protect · Acronis Agent +1
- CVE-2022-22689CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, dueCA Harvest Software Change Manager
- CVE-2022-23980WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerabilityDario Curvino Yasr – Yet Another Stars Rating
- CVE-2022-0381Embed Swagger <= 1.0.0 Reflected Cross-Site ScriptingEmbed Swagger
- CVE-2022-0380Fotobook <= 3.2.3 Reflected Cross-Site ScriptingFotobook
- CVE-2021-38130A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1.Voltage SecureMail Mail Relay.
- CVE-2022-0487A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel.kernel
- CVE-2021-4154A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser.kernel
- CVE-2021-29218A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior toHPE Agentless Management
- CVE-2021-29219A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.HPE FlexNetwork 5130 EI Switch Series
- CVE-2022-22939VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log filVMware Cloud Foundation
- CVE-2020-12965When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 addreAMD All supported processors
- CVE-2020-12966AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) an1st/2nd/3rd Gen AMD EPYC™ Processors
- CVE-2020-12891AMD Radeon Software may be vulnerable to DLL Hijacking through path variable.AMD Radeon Software · AMD Radeon Pro Software for Enterprise
- CVE-2021-21971An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21970An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc.Sealevel
- CVE-2021-21969An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc.Sealevel"
- CVE-2022-23379Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
- CVE-2022-23330A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code vi
- CVE-2022-23329A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via
- CVE-2022-24348Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repositgithub.com/argoproj/argo-cd/v2 · github.com/argoproj/argo-cd
- CVE-2021-46671options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
- CVE-2022-24448An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5.
- CVE-2021-45408Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect users to malicious sit
- CVE-2022-24129The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction o
- CVE-2021-29398Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Club Management 6.3 al
- CVE-2021-29397Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 al
- CVE-2021-29396Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use various
- CVE-2021-29395Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthen
- CVE-2021-29394Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote authentic
- CVE-2021-29393Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenti
- CVE-2022-24249A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of
- CVE-2021-45429A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set_configuration in ya
- CVE-2021-43635A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execut
- CVE-2022-24262The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attacke
- CVE-2022-24259An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a c
- CVE-2022-24260A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.
- CVE-2021-44977In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.
- CVE-2021-44978iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.
- CVE-2021-46398A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilegithub.com/filebrowser/filebrowser/v2
- CVE-2021-43145With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.
- CVE-2021-44886In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons.
- CVE-2021-44983In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.
- CVE-2021-46320In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal p@openzeppelin/contracts · @openzeppelin/contracts-upgradeab…
- CVE-2022-23316An issue was discovered in taoCMS v3.0.2.
- CVE-2021-44903Micro-Star International (MSI) Center Pro <= 2.0.16.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the atidgl
- CVE-2021-44901Micro-Star International (MSI) Dragon Center <= 2.0.116.0 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the at
- CVE-2021-44900Micro-Star International (MSI) App Player <= 4.280.1.6309 is vulnerable to multiple Privilege Escalation (LPE/EoP) vulnerabilities in the NT
- CVE-2021-44899Micro-Star International (MSI) Center <= 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk
- CVE-2021-44246Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a s
- CVE-2021-44247Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain com
- CVE-2021-44880D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vu
- CVE-2021-44881D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function.
- CVE-2021-44882D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function.
- CVE-2021-45733TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost.
- CVE-2021-45734TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules.
- CVE-2021-45735TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attacke
- CVE-2021-45736TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg.
- CVE-2021-45737TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function.
- CVE-2021-45738TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile.
- CVE-2021-45739TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function.
- CVE-2021-45740TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function.
- CVE-2021-45741TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg.
- CVE-2021-45742TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function.
- CVE-2021-45986Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInf
- CVE-2021-45987Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckToo
- CVE-2021-45988Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward.
- CVE-2021-45989Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh.
- CVE-2021-45990Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture.
- CVE-2021-45991Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers.
- CVE-2021-45992Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList.
- CVE-2021-45993Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify.
- CVE-2021-45994Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule.
- CVE-2021-45995Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute.
- CVE-2021-45996Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping.
- CVE-2021-45997Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping.
- CVE-2021-45998D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress paramete
- CVE-2021-46226D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp.
- CVE-2021-46227D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp.
- CVE-2021-46228D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp.
- CVE-2021-46229D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp.
- CVE-2021-46230D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter.
- CVE-2021-46231D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp.
- CVE-2021-46232D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp.
- CVE-2021-46233D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm.
- CVE-2021-46452D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySett
- CVE-2021-46453D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings.
- CVE-2021-46454D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings.
- CVE-2021-46455D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings.
- CVE-2021-46456D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings.
- CVE-2021-46457D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings.
- CVE-2022-24142Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetFirewallCfg.
- CVE-2022-24143Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set.
- CVE-2022-24144Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting.
- CVE-2022-24145Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formWifiBasicSet.
- CVE-2022-24146Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetQosBand.
- CVE-2022-24147Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromAdvSetMacMtuWan.
- CVE-2022-24148Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg.
- CVE-2022-24149Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat.
- CVE-2022-24150Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan.
- CVE-2022-24151Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetWifiGusetBasic.
- CVE-2022-24152Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetRouteStatic.
- CVE-2022-24153Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule.
- CVE-2022-24154Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetRebootTimer.
- CVE-2022-24155Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function setSchedWifi.
- CVE-2022-24156Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetVirtualSer.
- CVE-2022-24157Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetMacFilterCfg.
- CVE-2022-24158Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetIpMacBind.
- CVE-2022-24159Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetPPTPServer.
- CVE-2022-24162Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function saveParentControlInfo.
- CVE-2022-24160Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formSetDeviceName.
- CVE-2022-24161Tenda AX3 v16.03.12.10_CN was discovered to contain a heap overflow in the function GetParentControlInfo.
- CVE-2022-24164Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetVirtualSer.
- CVE-2022-24163Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime.
- CVE-2022-24165Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList.
- CVE-2022-24166Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime.
- CVE-2022-24167Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ.
- CVE-2022-24168Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup.
- CVE-2022-24169Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindAdd.
- CVE-2022-24170Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel
- CVE-2022-24171Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer
- CVE-2022-24172Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule.
- CVE-2021-40403An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd)Gerbv
- CVE-2021-4043NULL Pointer Dereference in gpac/gpacgpac/gpac
- CVE-2022-0264A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures.kernel