CVE-2024-40089

CVE-2024-40089 affects Vilo 5 Mesh WiFi System up to version 5.16.1.33. Affected component is the device name handling, where a remote, authenticated attacker can inject shell commands to execute arbitrary code on the system. CVSSv3.1 base score 9.1 (CRITICAL) with network access, low attack comp...

CVE-2024-40090

The CVE-2024-40090 entry concerns Vilo 5 Mesh WiFi System versions 5.16.1.33 and earlier, where an information disclosure vulnerability exists in the Boa webserver. Remote, unauthenticated attackers can leak memory addresses (uClibc) and stack information by sending a GET request to the index pag...

[SECURITY] Fedora 39 Update: apache-commons-io-2.11.0-5.fc39

Commons-IO contains utility classes, stream implementations, file filters, and endian classes. It is a library of utilities to assist with developing IO functionality...

CVE-2024-10135

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

CVE-2024-10135

The CVE-2024-10135 issue affects ESAFENET CDG 5, specifically the NetSecConfigService.java function actionDelNetSecConfig. The root cause is improper handling/manipulation of the id argument, leading to an SQL injection vulnerability. The vulnerability is exploitable remotely and has public explo...

CVE-2024-10135 ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

CVE-2024-10134

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLogout of the file /com/esafenet/servlet/ajax/MultiServerAjax.java. The manipulation of the argument servername leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10134

The CVE-2024-10134 entry concerns ESAFENET CDG 5. The vulnerable component is the function connectLogout in /com/esafenet/servlet/ajax/MultiServerAjax.java, where the servername parameter is mishandled, causing SQL injection. Exploitation is described as remote and publicly disclosed. Multiple co...

CVE-2024-10133

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId leads to sql injection. The attack can b...

CVE-2023-49567

A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning functionality where the product incorrectly checks the site's certificate, which allows an attacker to make MITM SSL connections to an arbitrary site. The product trusts certificates that are issued using the MD5...

CVE-2024-10072

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affects the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument checklist leads to sql injection. The attack may be...

CVE-2024-10072

CVE-2024-10072 affects ESAFENET CDG version 5. The vulnerability exists in the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java , where manipulation of the argument checklist enables an SQL injection. The issue can be exploited remotely and t...

CVE-2024-10071

A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdateEncryptPolicyEdit of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument encryptPolicyId leads to sql injection. The attack can be...

CVE-2024-10071 ESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection

A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdateEncryptPolicyEdit of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument encryptPolicyId leads to sql injection. The attack can be...

CVE-2024-10071

The CVE-2024-10071 vulnerability affects ESAFENET CDG 5, specifically the function actionUpdateEncryptPolicyEdit in /com/esafenet/servlet/policy/EncryptPolicyService.java. Manipulating the encryptPolicyId parameter enables SQL injection, with remote exploitation possible. Public exploit/disclosur...

CVE-2024-10070

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the argument policyId leads to sql injection. It is possible to initiate the attack remotel...

CVE-2024-10069

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function actionPassMainApplication of the file /com/esafenet/servlet/client/MailDecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-10070 ESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the argument policyId leads to sql injection. It is possible to initiate the attack remotel...

CVE-2024-10070

CVE-2024-10070 affects ESAFENET CDG 5. The vulnerability lives in the function actionPolicyPush of PolicyPushControlAction.java and arises from improper handling of the policyId parameter, enabling SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. The vendor...

CVE-2024-10069

The CVE-2024-10069 entry applies to ESAFENET CDG 5, specifically the MailDecryptApplicationService.java function actionPassMainApplication. The vulnerability arises from manipulating the id argument, enabling SQL injection. It can be exploited remotely, and publicly disclosed exploits exist. The ...