SUSE SLES15 Security Update : 389-ds (SUSE-SU-2024:3257-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3257-1 advisory. - Update to version 1.4.4.20git3.e7ac6d87: - CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. bsc1225512 -...

Vulnerability fixed in Kemp LoadMaster

Kemp Technologies has fixed a vulnerability in Kemp LoadMaster and Progress LoadMaster. A malicious party could exploit the vulnerability to execute arbitrary commands on the vulnerable system without prior authentication via specially prepared HTTP calls. For successful abuse, the malicious part...

Dell SmartFabric OS10 安全漏洞

Dell SmartFabric OS10 is the operating system that runs on Dell EMC network devices and provides a range of networking functions and features. A cross-site request forgery vulnerability exists in Dell SmartFabric OS10, which can be exploited by a remote attacker to submit a specially crafted...

node-tar: denial of service while parsing a tar file due to lack of folders depth validation

A flaw was found in ISAACS's node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially...

PT-2024-9888 · Loway · Loway Queuemetrics

Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to an observable response discrepancy in Loway QueueMetrics, which can be exploited by a remote attacker to gain unauthorized access to sensitive data by...

CVE-2024-44761

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests...

CVE-2024-44761

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests...

CVE-2024-44761

CVE-2024-44761 affects EQ Enterprise Management System prior to v2.0.0 and allows directory traversal via crafted requests. The root cause is not explicitly detailed in the provided content, but multiple sources confirm a traversal vulnerability impacting versions before 2.0.0. Reported impact is...

CVE-2024-44761

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests...

DEBIAN-CVE-2024-7954

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request...

PT-2024-7309 · Icms · Icms

Name of the Vulnerable Software and Affected Versions: iCMS affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability in the iCMS content management system. It can be exploited by a remote attacker using a specially crafted HTTP request,...

PT-2024-30097 · Apollo · Apollo

Name of the Vulnerable Software and Affected Versions: apollocongif apollo version 2.2.0 Description: An issue in apollocongif apollo allows a remote attacker to obtain sensitive information via a crafted request. Recommendations: For version 2.2.0, consider restricting access to sensitive...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain access to the software environment.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to the software environment by sending specially craft...

ROS-20240816-11

A vulnerability in the procopen function of the PHP programming language interpreter exists due to a failure to take measures to neutralize special elements used by the operating system. to neutralize special elements used in the operating system command. Exploitation exploitation of the...

CVE-2024-42982

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

The vulnerability of the graphical user interface of the artificial intelligence-based security threat detection software FortiAIOps allows for CSRF attacks to be carried out.

The vulnerability of the graphical user interface of the artificial intelligence-based security threat detection software FortiAIOps is related to the of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack by sending specially crafted GET requests...

The vulnerability of the IP address checking function in FortiOS operating systems and FortiProxy proxy servers allows attackers to circumvent existing security restrictions.

The vulnerability of the IP address checking function in FortiOS operating systems and FortiProxy proxy servers for protecting against Internet attacks is related to the improper handling of numerical parameters based on different criteria. Exploiting this vulnerability allows a malicious actor t...

SAP CRM 代码问题漏洞

SAP CRM is a customer relationship management system from SAP, a German company. A code issue vulnerability exists in SAP CRM. An authenticated attacker could exploit this vulnerability to enumerate HTTP endpoints in the internal network via specially crafted HTTP requests...

The vulnerability of the BIND DNS server, related to the use of the assert() function or similar operators, allows attackers to cause a service failure.

The vulnerability of the BIND DNS server relates to the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

The vulnerability of Xerox WorkCentre 7220 microprogrammed software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Xerox WorkCentre 7220 microprogrammed software is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...