CVE-2024-2622

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been classified as critical. This affects an unknown part of the file /api/client/editemedia.php. The manipulation of the argument number/enterpriseuuid leads to sql injection. It is...

CVE-2024-2622 Fujian Kelixin Communication Command and Dispatch Platform editemedia.php sql injection

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been classified as critical. This affects an unknown part of the file /api/client/editemedia.php. The manipulation of the argument number/enterpriseuuid leads to sql injection. It is...

CVE-2024-2622 Fujian Kelixin Communication Command and Dispatch Platform editemedia.php sql injection

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been classified as critical. This affects an unknown part of the file /api/client/editemedia.php. The manipulation of the argument number/enterpriseuuid leads to sql injection. It is...

CVE-2024-2622

The CVE-2024-2622 entry concerns Fujian Kelixin Command and Dispatch Platform up to 20240318, with an SQL injection in /api/client/editemedia.php where the attacker can manipulate the number/enterprise_uuid parameter. This allows remote exploitation and has been disclosed publicly. Affected compo...

CVE-2024-2620

A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/downfile.php. The manipulation of the argument uuid leads to sql injection. The...

CVE-2024-2621 Fujian Kelixin Communication Command and Dispatch Platform pwd_update.php sql injection

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this issue is some unknown functionality of the file api/client/user/pwdupdate.php. The manipulation of the argument uuid leads to sql injection. The atta...

CVE-2024-2620 Fujian Kelixin Communication Command and Dispatch Platform down_file.php sql injection

A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/downfile.php. The manipulation of the argument uuid leads to sql injection. The...

CVE-2024-2620 Fujian Kelixin Communication Command and Dispatch Platform down_file.php sql injection

A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/downfile.php. The manipulation of the argument uuid leads to sql injection. The...

CVE-2024-2620

CVE-2024-2620 affects Fujian Kelixin Communication Command and Dispatch Platform (up to 20240318). Affected is the file api/client/down_file.php; manipulating the uuid parameter triggers a SQL injection. Exploitability is remote and exploit has been disclosed publicly (VDB-257197). Multiple sourc...

RHEL 8 : ovn23.03 (RHSA-2024:1388)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1388 advisory. OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native...

MAL-2024-1112 Malicious code in abcotv-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b2032a43dcea9b545087dcd1d72c8b8b1d34ecba06d2df5a34e6a463243ece5 The OpenSSF Package Analysis project identified 'abcotv-ads' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-28250 Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.8 and 1.15.2, In Cilium clusters with WireGuard enabled and traffic matching Layer 7 policies Wireguard-eligible traffic that is sent between a node's...

MAL-2024-1111 Malicious code in business-kpi-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 273b321944297087263b5b5821cab2c1f54c8c91e75998fe8c8bca26b8ffb0b7 The OpenSSF Package Analysis project identified 'business-kpi-manager' @ 5.9.1 pypi as malicious. It is considered malicious because: - The...

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Input Validation Error Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. An input validation error...

Cisco IP Phones Duplicate Key (CVE-2022-20817)

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

CVE-2024-2566

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/getextensionyl.php. The manipulation of the argument imei leads to sql...

CVE-2024-2566

The CVE-2024-2566 entry concerns Fujian Kelixin Communication Command and Dispatch Platform (up to 20240313). The vulnerability targets the file api/client/get_extension_yl.php, where manipulation of the imei parameter yields an SQL injection. Exploitation is described as remote. Public disclosur...

CVE-2024-2566 Fujian Kelixin Communication Command and Dispatch Platform get_extension_yl.php sql injection

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/getextensionyl.php. The manipulation of the argument imei leads to sql...

MAL-2024-1109 Malicious code in cert-orchestration-adapter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a46ccca932f3d69709f16aef0e3bc3498916b7e0b87a1d69a340ce1d65677dc4 The OpenSSF Package Analysis project identified 'cert-orchestration-adapter' @ 5.9.1 pypi as malicious. It is considered malicious because: - Th...

MAL-2024-1108 Malicious code in mle-py-connector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91bb80bd9d7444d113ce05b2d2abac925c10e36a23ae955fd9ebd682cd046bd1 The OpenSSF Package Analysis project identified 'mle-py-connector' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...