CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
TVT NVMS-1000 devices allow GET /.. Directory Traversal
Hg100_firmware, Hg100, Zenfone_4_selfie_firmware, Zenfone_4_selfie, Zenfone_live_(l1)_firmware, Zenfone_live_(l1), Zenfone_5_selfie_firmware, Zenfone_5_selfie, Zenfone_3s_max_firmware, Zenfone_3s_max
2022-01-07
N/A
9.8 CRITICAL
ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp.
In createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-122309228
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this vulnerability.
Wf2419_firmware, Wf2419, Dl4343_firmware, Dl4343, Wf2411_firmware, Wf2411, Wf2880_firmware, Wf2880, Netcore_router, Netcore_router_firmware
2020-01-02
N/A
6.1 MEDIUM
On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).
Wf2419_firmware, Wf2419, Dl4343_firmware, Dl4343, Wf2411_firmware, Wf2411, Wf2880_firmware, Wf2880, Netcore_router, Netcore_router_firmware
2020-01-02
N/A
6.1 MEDIUM
On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic).
Wf2419_firmware, Wf2419, Dl4343_firmware, Dl4343, Wf2411_firmware, Wf2411, Wf2880_firmware, Wf2880, Netcore_router, Netcore_router_firmware
2020-08-24
N/A
8.8 HIGH
On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page.
Wf2419_firmware, Wf2419, Dl4343_firmware, Dl4343, Wf2411_firmware, Wf2411, Wf2880_firmware, Wf2880, Netcore_router, Netcore_router_firmware
2020-01-02
N/A
6.1 MEDIUM
On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).