Read Time:6 Second
FEDORA-2022-4bc60c32a2
Packages in this update:
vim-9.0.828-1.fc37
Update description:
Security fix for CVE-2022-3705
Category Archives: Advisories
php-pear-CAS-1.6.0-1.fc35
Read Time:15 Second
FEDORA-2022-76b3530ac2
Packages in this update:
php-pear-CAS-1.6.0-1.fc35
Update description:
Changes in version 1.6.0
Bug Fixes:
Introduce required service_name constructor argument to fix service hostname discovery exploitation vulnerability CVE-2022-39369 (Henry Pan)
Set user agent [#421] (Fydon)
php-pear-CAS-1.6.0-1.fc37
Read Time:15 Second
FEDORA-2022-d6c6782130
Packages in this update:
php-pear-CAS-1.6.0-1.fc37
Update description:
Changes in version 1.6.0
Bug Fixes:
Introduce required service_name constructor argument to fix service hostname discovery exploitation vulnerability CVE-2022-39369 (Henry Pan)
Set user agent [#421] (Fydon)
php-pear-CAS-1.6.0-1.fc36
Read Time:15 Second
FEDORA-2022-37c2d26f59
Packages in this update:
php-pear-CAS-1.6.0-1.fc36
Update description:
Changes in version 1.6.0
Bug Fixes:
Introduce required service_name constructor argument to fix service hostname discovery exploitation vulnerability CVE-2022-39369 (Henry Pan)
Set user agent [#421] (Fydon)
ZDI-22-1505: D-Link DIR-1935 SetSysLogSettings IPAddress Command Injection Remote Code Execution Vulnerability
Read Time:10 Second
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
ZDI-22-1504: D-Link DIR-1935 SetQoSSettings QoSInfo Command Injection Remote Code Execution Vulnerability
Read Time:10 Second
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
ZDI-22-1503: D-Link DIR-1935 HNAP Incorrect Comparison Authentication Bypass Vulnerability
Read Time:8 Second
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 routers. Authentication is not required to exploit this vulnerability.
ZDI-22-1502: D-Link DIR-1935 SetVirtualServerSettings VirtualServerInfo Command Injection Remote Code Execution Vulnerability
Read Time:10 Second
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
ZDI-22-1501: D-Link DIR-1935 SOAPAction Stack-based Buffer Overflow Remote Code Execution Vulnerability
Read Time:8 Second
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Authentication is not required to exploit this vulnerability.
ZDI-22-1500: D-Link DIR-1935 SetSysEmailSettings Command Injection Remote Code Execution Vulnerability
Read Time:10 Second
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.