1161 matches found
CVE-2014-0808
Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...
CVE-2011-1325
Cross-site request forgery CSRF vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-3653
Multiple cross-site scripting XSS vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HTML via vectors involving the rank parameter, a different vulnerability than CVE-2013-3652...
CVE-2013-2315
data/class/pages/forgot/LCPageForgot.php in LOCKON EC-CUBE 2.11.0 through 2.12.3enP2 does not properly validate the input to the password reminder function, which allows remote attackers to obtain sensitive information via a crafted request...
Malicious code in cube-sign-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7b296732045296d18c9e2c5c6ea0f8feaa1bd21693f62a60cea65af5525491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3880 Malicious code in cube-sign-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc7b296732045296d18c9e2c5c6ea0f8feaa1bd21693f62a60cea65af5525491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-50596
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects t...
CVE-2024-50385
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects...
CVE-2024-45064
A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2024-50384
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects...
CVE-2024-45064
A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2024-45064
A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2024-45064
CVE-2024-45064 concerns STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. Cisco Talos confirms a buffer overflow in the FileX Internal RAM interface that can enable code execution via a specially crafted sequence of network requests. The root cause is insufficient validation when calculating the RAM-dis...
CVE-2024-50385
The CVE-2024-50385 issue affects STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0 and the X-CUBE-AZRTOS-F7 NetX Duo HTTP server components. Talos reports a denial-of-service flaw in the NetX HTTP server where specially crafted network packets trigger a DoS (availability impact). Technical details indica...
CVE-2024-50385
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects...
CVE-2024-50385
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects...
CVE-2024-50384
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects...
CVE-2024-50384
A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability affects...
CVE-2024-50384
CVE-2024-50384 concerns the STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0 NetX NetX Duo Web Component HTTP server. Talos details reveal a denial-of-service via the HTTP server PUT handling in x-cube-azrtos-f7, where the HTTP server creates a file for writing and, if an error occurs after the file is ...
CVE-2024-50594
The CVE-2024-50594 entry concerns STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. The issue is an integer underflow in the NetX Duo Web Component HTTP Server (nx_web_http_server.c) during HTTP PUT processing, which can cause denial of service when a sequence of malicious packets is sent. Affected comp...