14024 matches found
CVE-2024-2660 Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses
Vault and Vault Enterprise TLS certificates auth method did not correctly validate OCSP responses when one or more OCSP sources were configured. This vulnerability, CVE-2024-2660, affects Vault and Vault Enterprise 1.14.0 and above, and is fixed in Vault 1.16.0 and Vault Enterprise 1.16.1, 1.15.7...
CVE-2024-2660
CVE-2024-2660 : HashiCorp Vault and Vault Enterprise TLS cert authentication method did not correctly validate OCSP responses when multiple OCSP sources were configured, per the CVE entry. The issue affects Vault and Vault Enterprise 1.14.0 and newer and is fixed in Vault 1.16.0 and Vault Enterpr...
CVE-2024-2660 Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses
Vault and Vault Enterprise TLS certificates auth method did not correctly validate OCSP responses when one or more OCSP sources were configured. This vulnerability, CVE-2024-2660, affects Vault and Vault Enterprise 1.14.0 and above, and is fixed in Vault 1.16.0 and Vault Enterprise 1.16.1, 1.15.7...
Tenda FH1205 Stack Buffer Overflow Vulnerability (CNVD-2025-21465)
The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that arises from the page parameter of the fromAddressNat method failing to properly validate the length of the input data, which can be exploited by an attacker to execute...
Kofax Power PDF security vulnerabilities
Kofax Power PDF is a professional PDF editing and management software from Kofax. A security vulnerability exists in Kofax Power PDF that stems from a specific flaw in the app.response method that lacks proper validation of user-supplied data, allowing a remote attacker to execute arbitrary code ...
Tenda F1202 fromAddressNat Method Buffer Overflow Vulnerability
The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a buffer overflow vulnerability that stems from the mitInterface parameter of the fromAddressNat method failing to...
Tenda FH1202 time parameter buffer overflow vulnerability
The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 v1.2.0.14408, which is caused due to the time parameter of the saveParentControlInfo method failing to properly validate the length of the input data, and can be exploited by an...
Tenda FH1205 Stack Buffer Overflow Vulnerability
The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that arises from the entrys parameter of the fromAddressNat method failing to properly validate the length of the input data, which can be exploited by an attacker to execut...
PT-2024-4014 · Ivanti · Ivanti Endpoint Manager
Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2022 SU5 Description: The issue is related to a SQL Injection vulnerability in the GetDBPatches method of Ivanti Endpoint Manager, which fails to properly protect the SQL query structure. This allows ...
curl security and bug fix update
7.61.1-33.5 - cap SFTP packet size sent RHEL-5485 - when keyboard-interactive auth fails, try password 2229800 - unify the upload/method handling CVE-2023-28322 - fix cookie injection with none file CVE-2023-38546 - lowercase the domain names before PSL checks CVE-2023-46218...
Tenda F1202 formWriteFacMac Method Command Injection Vulnerability
The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...
CVE-2024-29276
An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component...
CVE-2024-29276
An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component...
PT-2024-22847 · Seeyonoa · Seeyonoa
Name of the Vulnerable Software and Affected Versions: seeyonOA version 8 Description: An issue was discovered that allows remote attackers to execute arbitrary code via the importProcess method in the WorkFlowDesignerController.class component. Recommendations: For seeyonOA version 8, as a...
Bento4 security vulnerabilities
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 release that stems from a denial of service issue in the AP4Sample::GetOffset method of the Ap4Sample.h file...
seyonOA security vulnerabilities
seeyonOA seeyonOA is a collaboration management software from China-based seeyonOA seeyonOA. A security vulnerability exists in seeyonOA v8 that allows remote attackers to execute arbitrary code via the importProcess method in the WorkFlowDesignerController.class component...
CVE-2024-29276
An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component...
Tenda FH1202 fromAddressNat Method Stack Buffer Overflow Vulnerability
The Tenda FH1202 is a dual-band wireless router from the Tenda brand, designed for large homes or small office environments, aiming to provide stable wireless network coverage and high-speed transmission. The Tenda FH1202 suffers from a stack buffer overflow vulnerability that stems from a buffer...
XZ Utils 5.6.0 / 5.6.1 Liblzma Backdoor Check
The version of XZ Utils installed on the remote host is potentially affected by a backdoor vulnerability. Note: This plugin is paranoid because not all instances of the affected versions of XZ Utils are known to be vulnerable to the backdoor. The method of installation of XZ Utils plays a role in...