CVE-2023-50311 IBM CICS Transaction Gateway for Multiplatforms information disclosure

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages...

CVE-2023-50311 IBM CICS Transaction Gateway for Multiplatforms information disclosure

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages...

Tenda F1202 security vulnerabilities

The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transfer rate of 1200Mbps. The Tenda F1202 suffers from a command injection vulnerability that stems from a command injection vulnerability in the mac parameter of the...

Tenda F1202 security vulnerabilities

The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transmission rate of 1200Mbps, equipped with four 5dBi antennas to enhance signal coverage. The Tenda F1202 suffers from a buffer overflow vulnerability that stems from the...

Tenda FH1205 security vulnerabilities

The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that arises from the entrys parameter of the fromAddressNat method failing to properly validate the length of the input data, which can be exploited by an attacker to execut...

Tenda FH1205 security vulnerabilities

The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that arises from the mitInterface parameter of the fromAddressNat method failing to properly validate the length of the input data, which can be exploited by an attacker to...

Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Summary Using Pickup: Local stock only as a click-and-collect points could cause a leak of customer addresses Details When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes it...

GHSA-MRJ3-F2H4-7W45 Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Summary Using Pickup: Local stock only as a click-and-collect points could cause a leak of customer addresses Details When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes it...

SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpenFile method. The issue results from the lack of proper validati...

SolarWinds Access Rights Manager OpenFileStreamLocal Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpenFileStreamLocal method. The issue results from the lack of prop...

Tenda FH1202 security vulnerabilities

The Tenda FH1202 is a dual-band wireless router from the Tenda brand, designed for large homes or small office environments, aiming to provide stable wireless network coverage and high-speed transmission. The Tenda FH1202 suffers from a stack buffer overflow vulnerability that stems from a buffer...

Tenda AC7 formSetCfm Method Buffer Overflow Vulnerability

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts the 802.11ac standard and supports dual-band concurrent transmission with a wireless rate of up to 1167Mbps. Tenda AC7 suffers from a buffer overflow vulnerability, which originates from...

MGASA-2024-0094 Updated thunderbird packages fix security vulnerabilities

Crash in NSS TLS method. CVE-2024-0743 JIT code failed to save return registers on Armv7-A. CVE-2024-2607 Integer overflow could have led to out of bounds write. CVE-2024-2608 Improve handling of out-of-memory conditions in ICU. CVE-2024-2616 NSS susceptible to timing attack against RSA decryptio...

CVE-2024-29888

Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...

CVE-2024-29888 Saleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...

CVE-2024-29888

Saleor is an e-commerce platform that serves high-volume companies. When using "Pickup: Local stock only" click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This iss...

CVE-2024-29888 Saleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. This updat...

Tenda FH1203: Command Injection Vulnerability

The Tenda FH1203 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1203 version 2.0.1.6, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

Tenda FH1205 security vulnerabilities

The Tenda FH1205 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the page parameter of the fromNatStaticSetting method of the /goform/NatStaticSetting file...