CVE-2019-3001

creationtimestamp| type| source ---|---|--- 2024-01-15 10:36:33+00:00| seen| https://t.me/ctinow/168265...

Extreme Networks HiveOS ah_auth Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Extreme Networks routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ahauth service, which listens on UDP port 3001. The issue results...

PT-2023-9161 · Ghost · Ghost

Name of the Vulnerable Software and Affected Versions: Ghost versions prior to 5.76.0 Description: The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack by sending a specially crafted malicious SVG file...

CVE-2023-4669

Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0...

CVE-2023-4669

Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass.This issue affects SYSGuard 3001: before 3.2.20.0...

Authentication flaw

UNSUPPPORTED WHEN ASSIGNED Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass.This issue affects SYSGuard 3001: before 3.2.20.0...

CVE-2023-4669 Authentication Bypass in Exagate SYSGuard 3001

Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0...

CVE-2023-4669 Authentication Bypass in Exagate SYSGuard 3001

Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0...

CVE-2023-4669

CVE-2023-4669 affects Exagate SYSGuard 3001. A vulnerability in Authentication by Assumed-Immutable Data allows authentication bypass for SYSGuard 3001 versions before 3.2.20.0. The NVD/NVD-derived metrics indicate a network-prior, no-privileges-required exploit with high confidentiality, integri...

PT-2023-30161

Name of the Vulnerable Software and Affected Versions Exagate SYSGuard 3001 versions prior to 3.2.20.0 Description The issue is related to an Authentication Bypass by Assumed-Immutable Data vulnerability, which allows for authentication bypass. This vulnerability affects Exagate SYSGuard 3001...

Schneider Electric IGSS

1. EXECUTIVE SUMMARY ​CVSS v3 7.8 ​ATTENTION: low attack complexity ​Vendor: Schneider Electric ​Equipment: IGSS Interactive Graphical SCADA System ​Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION ​Successful exploitation of this vulnerability may allow arbitrary code...

SUSE SLES12 Security Update : kernel-firmware (SUSE-SU-2023:3001-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3001-1 advisory. - CVE-2023-20593: Fixed AMD ucode for ZenBleed vulnerability bsc1213286. Tenable has extracted the preceding description block directly from...

CVE-2023-3001

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file...

CVE-2023-3001

Schneider Electric IGSS Dashboard (DashBoard.exe) vulnerability CVE-2023-3001: Deserialization of untrusted data (CWE-502) can lead to remote code execution when a user opens a malicious file. Affected: Dashboard v16.0.0.23130 and prior. CVSSv3.1 base score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...

CVE-2022-3001

creationtimestamp| type| source ---|---|--- 2022-09-15 18:27:46+00:00| seen| https://t.me/cibsecurity/49825...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-3001 Vulnerability in Milesight Video Management Systems (VMS)

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

CVE-2022-3001

Milesight VMS CVE-2022-3001 affects all firmware versions prior to 40.7.0.79-r1. Root cause: improper input handling in the camera’s web-based management interface. Impact: remote attacker can trigger a Denial of Service by sending a specially crafted HTTP request to the targeted network camera. ...

Mageia: Security Advisory (MGASA-2017-0087)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-3001

CVE-2019-3001 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: eProcurement) version 9.2. The vulnerability allows an unauthenticated attacker with network access over HTTP to read data from the affected SCM eProcurement component. The CVSS v3.1 base score is 5.3 (Confidentiality...