18654 matches found
Ivanti Connect Secure and Ivanti Policy Secure have security vulnerabilities
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. Ivanti Connect Secure and Ivanti Policy Secure contain a security...
Dell Secure Connect Gateway Trust Management Vulnerability
The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A trust management issue vulnerability exists in Dell Secure Connect Gateway SCG version 5.24.00.14, which stems from a certificate validation vulnerability that contains an error and can be exploited by a...
CVE-2024-37404: Undefined Security Weakness
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution...
CVE-2024-48016: Use of a Broken or Risky Cryptographic Algorithm
Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to...
PT-2024-32935 · Dell · Dell Secure Connect Gateway (Scg) 5.0 Appliance
Name of the Vulnerable Software and Affected Versions: Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, version 5.24 Description: The issue is related to the use of a broken or risky cryptographic algorithm, which could be exploited by a low-privileged attacker with remote access, potentially...
WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Woostagram Connect versions = 1.0.2...
Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise and IBM Integration Bus (CVE-2020-7769)
Summary IBM App Connect Enterprise and IBM Integration Bus ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID:CVE-2020-7769 DESCRIPTION: Nodejs could allow a remote attacker to execute arbitrary...
kernel: mptcp: ensure snd_nxt is properly initialized on connect
In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure sndnxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snduna: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 mptcpcleanuna+0x4b3/0x620 net/mptcp/protocol.c:1005 Modules...
CVE-2024-44775
kmqtt v0.2.7 is vulnerable to Denial of Service DoS due to a Null Pointer Exception. A remote attacker can cause the broker to crash by sending a specially crafted MQTT CONNECT packet that triggers an unhandled null reference, leading to an immediate process termination...
GO-2024-3199 Go-Landlock in best-effort mode did not restrict TCP bind and connect operations correctly in github.com/landlock-lsm/go-landlock
Go-Landlock in best-effort mode did not restrict TCP bind and connect operations correctly in github.com/landlock-lsm/go-landlock. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
CVE-2024-45276 MB connect line/Helmholz: tmp directory exposed via webservice
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication...
CVE-2024-45276 MB connect line/Helmholz: tmp directory exposed via webservice
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication...
CVE-2024-45276
Summary: CVE-2024-45276 permits an unauthenticated remote attacker to read files in the "/tmp" directory due to missing authentication. Connected sources identify affected hardware as Helmholz MB connect line / REX100 wireless router, with public records noting versions prior to 2.3.1 are impacte...
CVE-2024-45275
CVE-2024-45275 concerns a trust-management vulnerability in Helmholz Rex100 wireless routers where two hard-coded user accounts with fixed passwords enable an unauthenticated remote attacker to gain full control of the device. Public sources in the provided connected documents specify affected de...
CVE-2024-45275 MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices...
CVE-2024-45274 MB connect line/Helmholz: Remote code execution via confnet service
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication...
CVE-2024-45274
CVE-2024-45274 affects Helmholz REX100 and MBConnectline/mbNET.mini routers. Public data cites pre‑patch unauthenticated OS command execution via UDP on the confnet service, caused by missing authentication. Reported affected versions include REX100 < 2.3.3 (fixed in 2.3.3) and MBConnectline/m...
CVE-2024-45274 MB connect line/Helmholz: Remote code execution via confnet service
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication...
CVE-2024-45273 MB connect line/Helmholz: Weak encryption of configuration file
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used...
CVE-2024-45273
CVE-2024-45273 describes an unauthenticated local attacker who can decrypt the device’s configuration file due to a weak encryption implementation, leading to compromise of confidentiality, integrity, and availability. The vulnerability is triggered locally (attack vector: LOCAL) with low privile...