Skip to content
OpenAdvisories

Archive

20 December 2022

Vulnerabilities first published on this day (UTC), newest first.

53 results · Clear filters · Feed

  • High 7.7

    OpenFGA Authorization Bypass

    OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA version 0.3.0 is vulnerable to authorization bypass under certain conditions. This issue…

  • High 8.8

    Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager  2022.3.26 and earlier on…

  • High 7.8

    A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A cr…

  • High 8.6

    OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data W…

  • High 7.5

    D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2…

  • High 7.5

    Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState.

  • High 7.5

    The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceMac parameter at /goform/addWifiMacFilte…

  • High 7.5

    The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_se…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentContro…

  • High 8.8

    An issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows a…

  • High 7.5

    The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may …

  • High 7.5

    The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…

  • High 8.8

    An issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to e…

  • High 8.1

    An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Poin…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mac parameter at /goform/GetParentControlInfo.

  • High 7.5

    D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.

  • High 7.5

    Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInf…

  • High 7.5

    An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitr…

  • High 8.8

    An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to exe…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speed_dir parameter at /goform/SetSpeedWan.

  • High 8.8

    An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows …

  • High 7.5

    The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientSta…

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mitInterface parameter at /goform/addressNat.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand.

  • High 7.5

    Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInf…

  • High 7.5

    An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a M…