20686 matches found
CVE-2024-4760 Voltage glitch during startup of the EEFC NVM controller can bypass the security bit
A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set...
WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection vulnerability
Authenticated Contributor+ PHP Object Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin ShiftController Employee Shift Scheduling versions = 4.9.57...
Intel Ethernet Controller Administrative 安全漏洞
Intel Ethernet Controller Administrative is a tool from Intel Corporation USA. A security vulnerability exists in Intel Ethernet Controller Administrative prior to version 28.3 that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local...
Intel Ethernet Adapters 和 Intel Ethernet Controller I225 Manageability firmware 安全漏洞
Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation, USA. Intel Ethernet Adapters are Ethernet adapters. Intel Ethernet Controllers are Ethernet controllers. Intel Ethernet Controllers are an Ethernet controller. A security vulnerability exists in the Intel...
GHSA-QHJC-HG94-245V eZ Platform Prevent accepting app.php in URL in Platform.sh
The recommended rewrite rules in eZ Platform prevent users from including the front-controller script normally "app.php" in URLs. This prevents certain vulnerabilities related to caching. However, this is not possible when using eZ Platform Cloud i.e. running eZ Platform on the Platform.sh cloud...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
CVE-2024-31216 source-controller leaks theAzure Storage SAS token into logs on connection errors
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. The source-controller implements the source.toolkit.fluxcd.io API and is a core component of the GitOps toolkit. Prior to versi...
Source controller 安全漏洞
Source controller is a component of the Flux project. A security vulnerability exists in source-controller versions prior to 1.2.5. An attacker can exploit this vulnerability to gain access to Azure Blob Storage...
The vulnerability of the nci_free_device() function in the implementation of the NFC Controller Interface (NCI) in the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the ncifreedevice function in the net/nfc/nci/data.c module, which is part of the NFC Controller Interface NCI implementation in the Linux operating system, is related to a packet overflow issue called “rxdatareassembly”. Exploiting this vulnerability could allow an attacker ...
PT-2024-40432 · Ez Systems · Ez Platform
Name of the Vulnerable Software and Affected Versions: ezsystems/ezplatform versions 1.7.9 through 1.7.9, 1.13.5 through 1.13.5, 2.5.4 through 2.5.4 Description: The issue is related to caching vulnerabilities when the front-controller script is included in URLs. This is particularly problematic...
Intel Ethernet Controller Administrative Tools Installer Software Advisory - Lenovo Support US
No description provided...
CVE-2024-1914
An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific condition when specially...
CVE-2024-1913
An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. The vulnerability could potentially be exploited to perform unauthorized actions by an attacker. This vulnerability arises under specific...
May 14, 2024—KB5037836 (Security-only update)
None None...
OmniCore robot 代码问题漏洞
OmniCore robot is a robotics application. A code issue vulnerability exists in ABB IRC5, OmniCore. An attacker could cause the robot to stop, making the robot controller inaccessible...
PHOENIX CONTACT CHARX SEC 命令注入漏洞
The PHOENIX CONTACT CHARX SEC is a series of AC charging controllers from PHOENIX CONTACT, Germany. An input validation error vulnerability exists in PHOENIX CONTACT CHARX SEC-3000 version 1.5.1 and prior versions, which could allow a remote attacker to execute remote code...
PHOENIX CONTACT CHARX SEC-3000 安全漏洞
PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT CHARX SEC-3000 version 1.5.1 and earlier, which originates from a low-privileged local attacker who can perform an elevation of privilege using an...
Intel® Ethernet Controller Administrative Tools Installer Software Advisory
Summary: A potential security vulnerability in some Intel® Ethernet Controller Administrative Tools installation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21828 Description:...
TYPO3 跨站脚本漏洞
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 CMS, which stems from an inability to correctly encode user control values in file entities, making ShowImageController susceptible to...