Security Vulnerabilities - CVEs Published In 2022
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList.
CVSS Score
8.8
EPSS Score
0.011
Published
2022-08-31
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg.
CVSS Score
8.8
EPSS Score
0.011
Published
2022-08-31
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-08-31
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandledRejection` exiting AND using next start or a [custom server](https://nextjs.org/docs/advanced-features/custom-server). Deployments on Vercel ([vercel.com](https://vercel.com/)) are not affected along with similar environments where `next-server` isn't being shared across requests.
CVSS Score
5.3
EPSS Score
0.012
Published
2022-08-31
In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.
CVSS Score
9.8
EPSS Score
0.217
Published
2022-08-31
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
CVSS Score
9.8
EPSS Score
0.021
Published
2022-08-31
Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list.
CVSS Score
6.1
EPSS Score
0.008
Published
2022-08-31
The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file.
CVSS Score
8.8
EPSS Score
0.012
Published
2022-08-31
An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable. Man-in-the-middle attackers or a malicious server can crash TLS 1.2 clients during a handshake. If an attacker injects a large ticket (more than 256 bytes) into a NewSessionTicket message in a TLS 1.2 handshake, and the client has a non-empty session cache, the session cache frees a pointer that points to unallocated memory, causing the client to crash with a "free(): invalid pointer" message. NOTE: It is likely that this is also exploitable during TLS 1.3 handshakes between a client and a malicious server. With TLS 1.3, it is not possible to exploit this as a man-in-the-middle.
CVSS Score
5.9
EPSS Score
0.025
Published
2022-08-31
AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
CVSS Score
6.5
EPSS Score
0.027
Published
2022-08-31