CVE-2023-5800

Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API createoverlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service...

CVE-2023-5800 Insufficient input validation in VAPIX API create_overlay.cgi

Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API createoverlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service...

CVE-2023-5800 Insufficient input validation in VAPIX API create_overlay.cgi

Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API createoverlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service...

MAL-2024-692 Malicious code in wlwz-2312-5800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96f6776c01b0bad20c67f46b5523dece5292ce9d738606bfb82a67b1a203e3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96f6776c01b0bad20c67f46b5523dece5292ce9d738606bfb82a67b1a203e3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Out of Bound Read Vulnerability in Huawei Product (huawei-sa-20201216-01-obr)

There is an out of bound read vulnerability in some products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pointer Double Free Vulnerability in Some Huawei Products (huawei-sa-20210407-01-doublefree)

There is a pointer double free vulnerability in some Huawei Products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege Escalation Vulnerability in Some Huawei Products (huawei-sa-20201202-02-privilege)

There is a privilege escalation vulnerability in some Huawei products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Out of Bounds Write Vulnerability in Huawei CloudEngine Product (huawei-sa-20210519-01-cloudengine)

There is an out of bounds write vulnerability in some Huawei products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20161116-01-cfm)

There is a buffer overflow vulnerability in Connectivity Fault Management CFM function of some Huawei Products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TEM Opera Plus FM Family Transmitter 35.45 Cross Site Request Forgery

CSRF Change Forward Power: -------------------------...

Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity/known public exploitation Vendor : Rockwell Automation Equipment : Stratix 5800 and Stratix 5200 Vulnerabilities : Unprotected Alternate Channel, OS Command Injection 2. RISK EVALUATION Successful...

Rockwell Automation Stratix 5800 & 5200 Cisco IOS XE Web UI Privilege Escalation (CVE-2023-20198)

Rockwell Automation is aware of active exploitation of a previously unknown vulnerability in the Web UI feature of Cisco IOS XE Software when exposed to the internet or to untrusted networks. This vulnerability allows a remote, unauthenticated threat actor to create an account on a vulnerable...

Ubuntu: Security Advisory (USN-5800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Heimdal vulnerabilities (USN-5800-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5800-1 advisory. It was discovered that Heimdal incorrectly handled certain SPNEGO tokens. A remote attacker could possibly use this issue to caus...

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 arises from the improper handling of pointers, allowing attackers to trigger service failures.

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 relates to the exploitation of incorrect pointers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through...

Rockwell Automation Logix Controllers

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Inclusion of Functionality from Untrusted Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 stems from deficiencies in access control mechanisms, allowing attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 stems from deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Debian DLA-2903-1 : libraw - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2903 advisory. - In LibRaw through 0.18.4, an out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker...

Information Exposure Vulnerability on Several Huawei Products (huawei-sa-20220112-01-infodis)

There is an information exposure vulnerability on several Huawei Products. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...