CVE-2024-28335

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

CVE-2024-28335

Lektor versions prior to 3.3.11 are vulnerable to a Path Traversal vulnerability (CWE-22) due to improper sanitization of database path traversal inputs. An attacker can exploit this by tricking a victim's web browser into accessing an untrusted website that uses JavaScript to send requests to lo...

CVE-2024-28335

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

CVE-2024-28335

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

CVE-2024-28335: Improper Limitation of a Pathname to a Restricted Directory

Lektor before 3.3.11 does not sanitize DB path traversal. Thus, shell commands might be executed via a file that is added to the templates directory, if the victim's web browser accesses an untrusted website that uses JavaScript to send requests to localhost port 5000, and the web browser is...

PT-2024-22395 · Lektor · Lektor

Name of the Vulnerable Software and Affected Versions: Lektor versions prior to 3.3.11 Description: The issue concerns the lack of sanitization of database path traversal in Lektor. This allows shell commands to be executed via a file added to the templates directory under specific conditions. Th...

CVE-2024-2442

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system...

CVE-2024-2442

The CVE-2024-2442 vulnerability affects Franklin Fueling System EVO 550 and EVO 5000 (ATG) with versions prior to 2.26.3.8963. It is a Path Traversal (CWE-25) flaw that could allow an attacker to access sensitive files on the system, potentially enabling remote exploitation with low attack comple...

CVE-2024-2442 Path Traversal vulnerability in Franklin Fueling System EVO 550/5000

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system...

Franklin Fueling System EVO 550/5000

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Franklin Fueling System Equipment : EVO 550, EVO 5000 Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read...

PT-2024-20390 · Franklin Fueling Systems · Franklin Fueling Systems Ts-550 Evo +1

Name of the Vulnerable Software and Affected Versions: Franklin Fueling System EVO 550 affected versions not specified Franklin Fueling System EVO 5000 affected versions not specified Description: The issue is related to a Path Traversal vulnerability that could allow an attacker to access...

CVE-2024-2442: Path Traversal: '/../filedir'

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system...

Malicious code in wlwz-2312-5000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0434173cb65699bd45454f80e823d04cf650a8946ac127a143ffa8bed2832c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-21594

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

Heap overflow

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

CVE-2024-21594 Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

CVE-2024-21594 Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

CVE-2024-21594

CVE-2024-21594 affects Juniper Networks Junos OS on the SRX 5000 Series. It is a heap-based buffer overflow in the Network Services Daemon (NSD) that, when a specific command is repeatedly executed, can corrupt memory and cause a crash of the Flow Processing Daemon (flowd), requiring an NSD resta...

CVE-2024-21594: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

PT-2023-9645 · Cisco · Cisco Industrial Ethernet 5000 +3

Name of the Vulnerable Software and Affected Versions: Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches affected versions not specified Description: The issue is related to the incorrect handling of IPv4 access control lists ACLs on switched virtual interfaces when an administrator...