185 matches found
CVE-2023-52164
accessdevice.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Digiever DS-2105 Pro 安全漏洞
The Digiever DS-2105 Pro is a network video recorder from Digiever. A security vulnerability exists in the Digiever DS-2105 Pro version 3.1.0.71-11, which stems from allowing timetzsetup.cgi command injection...
CVE-2023-52164
accessdevice.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Digiever DS-2105 Pro 安全漏洞
The Digiever DS-2105 Pro is a network video recorder from Digiever. A security vulnerability exists in Digiever DS-2105 Pro version 3.1.0.71-11. An attacker can exploit the vulnerability to read arbitrary files...
CVE-2023-52164
CVE-2023-52164 affects Digiever DS-2105 Pro (3.1.0.71-11). The issue is an arbitrary file read via access_device.cgi, with impact limited to devices no longer supported by the maintainer. Affected component: access_device.cgi on the DS-2105 Pro; root cause not explicitly detailed in the provided ...
CVE-2023-52163
Digiever DS-2105 Pro 3.1.0.71-11 contains a command injection vulnerability in time_tzsetup.cgi. The Nuclei template attributes the issue to unsanitized input in time_tzsetup.cgi, allowing an attacker to execute arbitrary commands remotely. Reported impact is remote code execution with high sever...
PT-2025-1555
Name of the Vulnerable Software and Affected Versions Digiever DS-2105 Pro versions 3.1.0.71-11 Digiever DS-2105 Pro affected versions not specified Description The Digiever DS-2105 Pro network video recorder NVR has a flaw related to missing authorization, allowing for command injection via the...
VulnCheck KEV: CVE-2023-52163
Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via timetzsetup.cgi...
CVE-2024-45412
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled data tags can reach a Unicode normalization with a compatibility form NFKD. Under Windows, such normalization is costly in resources and may lead to denial o...
SUSE SLES12: hdf5-gnu-hpc-devel / hdf5-gnu-mvapich2-hpc-devel / etc (SUSE-SU-2024:2105-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2105-1 advisory. - Fix various security issues in hdf5 bsc1224158: CVE-2024-29158, CVE-2024-29161, CVE-2024-29166, CVE-2024-32608, CVE-2024-32610,...
RHEL 4 : openssl (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssl: Memory corruption in the ASN.1 encoder CVE-2016-2108 - Integer overflow in the EVPEncodeUpdate...
Malicious code in wlwz-2312-2105 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 302bcaa181f8bb98c170e6030b34f2aa3e7108fd97ed448b5e15648f6594d8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-364 Malicious code in wlwz-2312-2105 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 302bcaa181f8bb98c170e6030b34f2aa3e7108fd97ed448b5e15648f6594d8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2311-2105 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64b0eb8568ce1a02816aadfce2d517ec5cd3945d96b4fb1e34e415a4ba25c42c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Amazon Linux 2 : python-pillow (ALAS-2023-2105)
The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2105 advisory. An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number o...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-2105)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-2105
CVE-2023-2105 concerns the Easy!Appointments project by alextselegidis. The issue is a session fixation vulnerability where the application does not generate a new ea_session cookie after user authentication, allowing a malicious actor to inject a session cookie and gain access after login. The f...
CVE-2023-2105 Session Fixation in alextselegidis/easyappointments
Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-2105 Session Fixation in alextselegidis/easyappointments
Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
K07538415: Multiple OpenSSL vulnerabilities
Security Advisory Description On May 3, 2016, OpenSSL announced the discovery of the following vulnerabilities: CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 CVE-2016-2176 For the complete announcement from OpenSSL, refer to OpenSSL Security Advisory 3rd May 2016. Note :...