71 matches found
EUVD-2026-4240
Insertion of Sensitive Information Into Sent Data vulnerability in Cargus eCommerce Cargus cargus allows Retrieve Embedded Sensitive Data.This issue affects Cargus: from n/a through = 1.5.8...
CVE-2022-4240
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1...
CVE-2025-4240
creationtimestamp| type| source ---|---|--- 2025-05-03 18:17:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14702 2025-05-03 19:40:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobytyxhc3f2 2025-05-03...
CVE-2025-4240
A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component LCD Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
CVE-2025-4240
A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component LCD Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
CVE-2025-4240 PCMan FTP Server LCD Command buffer overflow
A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component LCD Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
openSUSE: Security Advisory for the Linux Kernel (Live Patch 17 for SLE 15 SP5) (SUSE-SU-2024:4240-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4240
Honeywell OneWireless is affected by CVE-2022-4240 (Missing Authentication for Critical Function), enabling an authentication bypass. The issue affects OneWireless version 322.1. Red Hat and other feeds reference an unauthenticated API exposing network-resource information and note mitigation via...
CVE-2022-4240 Unauthenticated API allowing an attacker to obtain the information about network resources
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1...
CVE-2022-4240 Unauthenticated API allowing an attacker to obtain the information about network resources
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1...
CVE-2019-4240
CVE-2019-4240 is a bypass client-side validation vulnerability in IBM Cloud Pak System V2.3.0. An authenticated user with local access could bypass input validation and obtain administrator access due to the lack of server-side validation. IBM has addressed this by upgrading to V2.3.0.1 fixpak fo...
CVE-2021-4240
Summary: CVE-2021-4240 affects phpservermon, specifically the function generatePasswordResetToken in src/psm/Service/User.php. The root cause is use of a predictable algorithm in the random number generator, leading to possible guessing of reset tokens. The vulnerability has public exploit inform...
CVE-2021-4240 phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator
A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...
CVE-2021-4240 phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator
A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the publ...
CVE-2020-4240
IBM Spectrum Protect Plus 10.1.0–10.1.5 is affected by a path traversal vulnerability that enables a remote attacker to overwrite or create arbitrary files via a specially crafted URL/request. The root cause cited across sources is improper validation of a user-supplied path in the Administrative...
Security Bulletin: Directory Traversal vulnerabilities in IBM Spectrum Protect Plus (CVE-2020-4240, CVE-2020-4209)
Summary IBM Spectrum Protect Plus could allow a remote attacker to traverse directories on the system which can result in the creation of arbitrary files on the system or files being overwritten. Vulnerability Details CVEID: CVE-2020-4240 DESCRIPTION: IBM Spectrum Protect Plus could allow a remot...
Ubuntu 16.04 LTS : Kamailio vulnerability (USN-4240-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4240-1 advisory. It was discovered that Kamailio incorrectly handled a specially crafted file. An attacker could possibly use this issue to cause a denial of service or other...
RHEL 7 : openslp (RHSA-2019:4240)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4240 advisory. OpenSLP is an open source implementation of the Service Location Protocol SLP which is an Internet Engineering Task Force IETF standards track protoc...