Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-46485 State: PUBLISHED Published: 2023-08-02T00:00:00 Last Updated: 2024-10-17T18:26:30.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WodenSec/CVE-2022-46485
CVE ID: CVE-2022-46486 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-03T14:31:46.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://sconedocs.github.io/release5.7/ - https://jovanbulck.github.io/files/ccs19-tale.pdf - https://jovanbulck.github.io/files/oakland24-pandora.pdf
CVE ID: CVE-2022-46487 State: PUBLISHED Published: 2023-12-30T00:00:00.000Z Last Updated: 2025-04-17T20:07:28.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel analysis. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sconedocs.github.io/release5.7/ - https://jovanbulck.github.io/files/acsac20-fpu.pdf - https://www.intel.com/content/ww
/sconedocs.github.io/release5.7/ - https://jovanbulck.github.io/files/acsac20-fpu.pdf - https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html#inpage-nav-3-3 - https://nvd.nist.gov/vuln/detail/CVE-2020-15107 - https://nvd.nist.gov/vuln/detail/CVE-2020-0561#vulnCurrentDescriptionTitle - https://jovanbulck.github.io/files/oakland24-pandora.pdf
CVE ID: CVE-2022-46489 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:44:58.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2328
CVE ID: CVE-2022-46490 State: PUBLISHED Published: 2023-01-05T00:00:00.000Z Last Updated: 2025-04-10T14:43:51.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2327
CVE ID: CVE-2022-46491 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T14:57:16.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Fanli2012/nbnbk/issues/2
CVE ID: CVE-2022-46492 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T03:49:27.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Fanli2012/nbnbk/issues/3
CVE ID: CVE-2022-46493 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-15T14:13:26.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Fanli2012/nbnbk/issues/1
CVE ID: CVE-2022-46496 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:38:30.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.integrity.pt/advisories/cve-2022-46496/
CVE ID: CVE-2022-46497 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-28T20:21:36.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2022-46497/blob/main/CVE-33
CVE ID: CVE-2022-46498 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-03T14:31:46.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2022-46498/blob/main/CVE-32
CVE ID: CVE-2022-46499 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-14T18:55:01.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2022-46499/blob/main/CVE-31
CVE ID: CVE-2022-46501 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T17:29:32.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://accruent.com - https://maintenanceconnection.ca/zero-day-flaw-in-accruent-software/
CVE ID: CVE-2022-46502 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T19:02:51.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/snowingllll/bug_report/blob/main/vendors/donbermoy/Online%20Student%20Enrollment%20System/SQLi-1.md
CVE ID: CVE-2022-46503 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:30:39.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mkwsj007/bug_report/blob/main/vendors/donbermoy/Online%20Student%20Enrollment%20System/XSS-1.md
CVE ID: CVE-2022-46505 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T16:45:17.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://smalltown123.notion.site/MatrixSSL-session-resume-bug-a0 - https://github.com/SmallTown123/details-for-CVE-2022-46505
CVE ID: CVE-2022-46527 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:38:58.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elsys.se/en/ers-sound/ - https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2022-46527.pdf
CVE ID: CVE-2022-46530 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:47:08.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mac parameter at /goform/GetParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/GetParentControlInfo/GetParentControlInfo.md
CVE ID: CVE-2022-46531 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T15:55:04.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/addWifiMacFilter_deviceId/addWifiMacFilter_deviceId.md
CVE ID: CVE-2022-46532 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T15:54:21.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceMac parameter at /goform/addWifiMacFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/addWifiMacFilter_deviceMac/addWifiMacFilter_deviceMac.md
CVE ID: CVE-2022-46533 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:46:20.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formSetClientState_limitSpeed/formSetClientState_limitSpeed.md
CVE ID: CVE-2022-46534 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:45:52.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speed_dir parameter at /goform/SetSpeedWan. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formSetSpeedWan/formSetSpeedWan.md
CVE ID: CVE-2022-46535 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:45:21.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/SetClientState. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formSetClientState_deviceId/formSetClientState_deviceId.md
CVE ID: CVE-2022-46536 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T19:13:19.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formSetClientState_limitSpeedUp/formSetClientState_limitSpeedUp.md
CVE ID: CVE-2022-46537 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T19:01:53.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formWifiBasicSet_security/formWifiBasicSet_security.md
CVE ID: CVE-2022-46538 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:53:59.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formWriteFacMac/formWriteFacMac.md
CVE ID: CVE-2022-46539 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:42:44.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formWifiBasicSet_security%20_5g/formWifiBasicSet_security_5g.md
CVE ID: CVE-2022-46540 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:36:50.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromAddressNat_entrys/fromAddressNat_entrys.md
CVE ID: CVE-2022-46541 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:35:28.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/form_fast_setting_wifi_set/form_fast_setting_wifi_set.md
CVE ID: CVE-2022-46542 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:12:15.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromAddressNat_page/fromAddressNat_page.md
CVE ID: CVE-2022-46543 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:44:46.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the mitInterface parameter at /goform/addressNat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromAddressNat_mitInterface/fromAddressNat_mitInterface.md
CVE ID: CVE-2022-46544 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:43:16.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formexeCommand/formexeCommand.md
CVE ID: CVE-2022-46545 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:42:29.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromNatStaticSetting/fromNatStaticSetting.md
CVE ID: CVE-2022-46546 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:42:06.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromRouteStatic/fromRouteStatic.md
CVE ID: CVE-2022-46547 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T18:11:20.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromVirtualSer/fromVirtualSer.md
CVE ID: CVE-2022-46548 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:41:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromDhcpListClient/fromDhcpListClient.md
CVE ID: CVE-2022-46549 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:40:57.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/saveParentControlInfo_deviceId/saveParentControlInfo_deviceId.md
CVE ID: CVE-2022-46550 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:40:08.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/saveParentControlInfo_urls/saveParentControlInfo_urls.md
CVE ID: CVE-2022-46551 State: PUBLISHED Published: 2022-12-20T00:00:00.000Z Last Updated: 2025-04-16T17:39:19.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/saveParentControlInfo_time/saveParentControlInfo_time.md
CVE ID: CVE-2022-46552 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-27T14:05:48.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/78.html - https://www.dlink.com/en/security-bulletin/ - https://github.com/FloeDesignTechnologies/phpcs-security-audit/blob/master/Security/Sniffs/BadFunctions/SystemExecFunctionsSniff.
ithub.com/FloeDesignTechnologies/phpcs-security-audit/blob/master/Security/Sniffs/BadFunctions/SystemExecFunctionsSniff.php - https://www.php.net/manual/en/ref.exec.php - https://francoataffarel.medium.com/cve-2022-46552-d-link-dir-846-wireless-router-in-firmware-fw100a53dbr-retail-has-a-vulnerability-5b4ca1864c6e - https://github.com/c2dc/cve-reported/blob/main/CVE-2022-46552/CVE-2022-46552.md - http://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html
CVE ID: CVE-2022-46560 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T04:06:04.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/rkXr4BQPi - https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe - https://hackmd.io/%400dayResearch/SetWan2Settings_pptp - https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp
CVE ID: CVE-2022-46561 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T04:04:46.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/ry55QVQvj - https://hackmd.io/%400dayResearch/SetWanSettings_PPPoE - https://hackmd.io/%400dayResearch/SetWanSettings_L2TP - https://hackmd.io/%400dayResearch/SetWanSettings_PPTP
CVE ID: CVE-2022-46562 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T04:03:23.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/B1C9jeXDi - https://hackmd.io/%400dayResearch/SetQuickVPNSettings_PSK
CVE ID: CVE-2022-46563 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T04:02:09.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/HkDzZLCUo - https://hackmd.io/%400dayResearch/SetDynamicDNSSettings
CVE ID: CVE-2022-46566 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-04-15T04:00:32.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://hackmd.io/%400dayResearch/SyhDme7wo - https://hackmd.io/%400dayResearch/SetQuickVPNSettings_Password