Browse CVEs

CRITICAL 9.8 CVE-2022-46585 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46586 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (s… Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46588 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46589 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (sub_41E730) f… Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46590 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) f… Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46591 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46592 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_5g function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46593 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46594 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46596 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46599 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46600 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g fu… Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46601 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2014-125026 LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted us… Golz4 2014-07-11+ Fix from $2,3002022-12-27 HIGH 7.2 CVE-2022-46560 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Setti… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46561 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettin… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46562 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettin… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46563 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDN… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46566 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNS… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46568 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSy… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46569 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecur… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 7.2 CVE-2022-46570 D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Setti… Dir 882 A1 Firmware Mitigation only Fix from $1,9502022-12-23 HIGH 8.8 CVE-2022-47942 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, relate… Linux Kernel 5.15.62 / 5.18.18+ Fix from $1,9502022-12-23 HIGH 8.1 CVE-2022-43598 Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A spec… Debian Linux No fix yet Fix from $1,9502022-12-22 CRITICAL 9.8 CVE-2022-41794 A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file ca… Debian Linux No fix yet Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-41837 An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Spec… Debian Linux No fix yet Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-41838 A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds… Debian Linux No fix yet Fix from $2,3002022-12-22 HIGH 8.1 CVE-2022-41981 A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to… Debian Linux No fix yet Fix from $1,9502022-12-22 CRITICAL 9.8 CVE-2022-41639 A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A s… Debian Linux No fix yet Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-38143 A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can w… Openimageio No fix yet Fix from $2,3002022-12-22