81 matches found
CVE-2024-39569: Improper Neutralization of Special Elements used in a Command
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker...
CVE-2024-31209 OpenID Connect client Atom Exhaustion in provider configuration worker ets table location
oidcc is the OpenID Connect client library for Erlang. Denial of Service DoS by Atom exhaustion is possible by calling oidccproviderconfigurationworker:getproviderconfiguration/1 or oidccproviderconfigurationworker:getjwks/1. This issue has been patched in versions3.1.2 & 3.2.0-beta.3...
CVE-2024-31209 OpenID Connect client Atom Exhaustion in provider configuration worker ets table location
oidcc is the OpenID Connect client library for Erlang. Denial of Service DoS by Atom exhaustion is possible by calling oidccproviderconfigurationworker:getproviderconfiguration/1 or oidccproviderconfigurationworker:getjwks/1. This issue has been patched in versions3.1.2 & 3.2.0-beta.3...
oidcc 安全漏洞
oidcc is an open source OpenId Connect client library in Erlang & Elixir by The Erlang Ecosystem Foundation. A security vulnerability exists in oidcc 3.0.0 and later, which stems from the presence of a Denial of Service DoS vulnerability...
Information disclosure
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.1 SP1. The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also...
CVE-2024-22045
CVE-2024-22045 concerns Siemens SINEMA Remote Connect Client. Affected: all versions prior to V3.1 SP1. Issue: insertion of sensitive information into files/directories that are externally accessible and also exposed via the product’s web interface, impacting confidentiality. Public documents con...
CVE-2024-22045: Insertion of Sensitive Information into Externally-Accessible File or Directory
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.1 SP1. The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also...
Siemens SINEMA Remote Connect 安全漏洞
SINEMA Remote Connect is a management platform for remote networks that makes it simple to manage tunneled connections VPN between headquarters, service technicians and installed machines or plants. An information disclosure vulnerability exists in Siemens SINEMA Remote Connect Client, which can ...
Malicious code in fitbit-connect-client-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08efae8d0db8e2e4172e8acf35605a70436f1b61b61df70ccd478b1eb14052f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Code injection
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...
CVE-2021-31338
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...
CVE-2021-31338
The CVE-2021-31338 issue affects SINEMA Remote Connect Client (all versions
CVE-2021-31338: External Control of System or Configuration Setting
A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.0 SP1. Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device...
libvncserver: buffer overflow in ConnectClientToUnixSock()
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...
Sophos Connect Client Remote Code Execution Vulnerability
Sophos Sophos Connect client is an IPsec remote access VPN application from Sophos UK. A security vulnerability exists in Sophos Connect Client versions prior to 2.1, which can be exploited by malicious websites to remotely execute code in Sophos Connect Client. The vulnerability can be exploited...
CVE-2021-25265
A malicious website could execute code remotely in Sophos Connect Client before version 2.1...
CVE-2021-25265
A malicious website could execute code remotely in Sophos Connect Client before version 2.1...
CVE-2021-25265
CVE-2021-25265 affects Sophos Connect Client prior to v2.1, where a malicious website could remotely execute code on a user’s system. The vulnerability is triggered when a user visits a malicious site, with network-based access and user interaction potentially required depending on variant, and r...