CVE-2023-27017

creationtimestamp| type| source ---|---|--- 2023-04-07 07:27:16+00:00| seen| https://t.me/cibsecurity/61640...

CVE-2023-27017

CVE-2023-27017 affects Tenda AC10 (US_AC10V4.0si_V16.03.10.13_cn). The issue is a stack overflow in the sub_45DC58 function that can be triggered remotely over the network, allowing a Denial of Service or arbitrary code execution per the documented description. Impact is high (CVE data indicates ...

CVE-2023-27017

Tenda AC10 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the sub45DC58 function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

SUSE CVE-2021-27017

Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release...

Puppet Agent 7.x < 7.4.0 Deserialization

The version of Puppet Agent installed on the remote Windows host is 7.x prior to 7.4.0. It is, therefore, affected by an deserialization vulnerability. An authenticated, remote attacker can exploit this to execute arbitrary code on the target host. Note that Nessus has not tested for this issue b...

Trend Micro IMSVA External Entity Injection (CVE-2020-27017)

An XXE vulnerability exists in Trend Micro InterScan Messaging Virtual Appliance. The vulnerability is due to insufficient validation of XML data in the Java class PolicyWSAction...

CVE-2020-27017

creationtimestamp| type| source ---|---|--- 2020-11-06 12:36:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2051...

Security Bulletin: Ceilometer database access unrestricted in PowerVC (CVE-2015-1937)

Summary IBM PowerVC is using a ceilometer database that does not have authentication enabled. Vulnerability Details CVEID: CVE-2015-1937 DESCRIPTION: IBM PowerVC NoSQL database used by ceilometer is listening on the remote port and is configured to allow connections without any authentication. A...

IBM PowerVC Elevation of Privilege Vulnerability

IBM PowerVC is a suite of virtualization management solutions. The solution supports virtual system management, virtual image management and deployment, and virtual workload management. The IBM PowerVC ceilometer NoSQL database does not require authentication to be performed, and an elevation of...

40,000 UnProtected MongoDB Databases Found on the Internet

Nearly 40,000 organisations running MongoDB, a NoSQL high performance and cross-platform document-oriented database, are found to be unprotected and vulnerable to hackers. Three students from University of Saarland in Germany at the Centre for IT Security – Kai Greshake, Eric Petryka and Jens...