3097 matches found
Landray EKP 安全漏洞
Landray EKP is an office automation solution from China-based Landray that enables companies to easily model and manage. A security vulnerability exists in Landray EKP V16 and prior versions, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to...
CVE-2024-24458
The CVE-2024-24458 entry describes an invalid memory access in the ENB Configuration Transfer message handling of Athonet vEPC MME v11.4.0. The underlying issue allows an attacker to trigger a Denial of Service on the cellular network by repeatedly initiating connections and sending a crafted pay...
CVE-2024-24455
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...
Hewlett Packard Enterprise Athonet vEPC MME 安全漏洞
Hewlett Packard Enterprise Athonet vEPC MME HPE Athonet vEPC MME is a device management system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Athonet vEPC MME version 11.4.0, which stems from the presence of an invalid memory access condition th...
Hewlett Packard Enterprise Athonet vEPC MME 安全漏洞
Hewlett Packard Enterprise Athonet vEPC MME HPE Athonet vEPC MME is a device management system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Athonet vEPC MME version 11.4.0, which stems from the presence of an invalid memory access condition th...
CVE-2024-24453
CVE-2024-24453 affects Hewlett Packard Enterprise Athonet vEPC MME 11.4.0. The vulnerability is an invalid memory access when handling the ProtocolIE_ID field of the E-RAB NotToBeModifiedBearerModInd information element, which can be exploited to cause a DoS on the cellular network by repeatedly ...
CVE-2024-37285
A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. A successful attack requires a malicious user to have a combination of both specific Elasticsearch indices privileges...
CVE-2024-42834
A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...
xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org serv...
CVE-2024-42834
A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...
CVE-2024-42834
The CVE-2024-42834 issue is a stored XSS in the Create Customer API of Incognito Service Activation Center (SAC) UI v14.11. An authenticated attacker can inject a crafted payload via the lastName parameter to execute arbitrary web scripts or HTML. Details across Red Hat, NVD, CNNVD, CIRCL and rel...
CVE-2024-42834
A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...
CVE-2024-28726
An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to execute arbitrary code via a crafted payload to the Diagnostics function...
D-Link DWR-2000M 命令注入漏洞
The D-Link DWR-2000M is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link DWR-2000M. A local attacker can exploit the vulnerability to execute arbitrary code by sending a crafted payload to the diagnostic function...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Sysax Multi Server 6.99 SSH Denial Of Service
Exploit Title: Sysax Multi Server 6.99 - SSH Denial of Service Date: 2024-11-03 Exploit Author: Yehia Elghaly Mrvar0x Vendor Homepage: https://www.sysax.com/ Software Link: https://www.sysax.com/download/sysaxservsetup.msi Version: Sysax Multi Server 6.99 Tested on: Windows 10 x64 Steps -- Compil...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
CVE-2024-23113 The script is designed to detect CVE-2024-2311...
CVE-2024-48138
PluXml v5.8.16 and earlier is affected by a remote code execution (RCE) in the /PluXml/core/admin/parametres_edittpl.php component. The issue allows an attacker to inject a crafted payload into a template to execute arbitrary code. Connected documents corroborate the vulnerability in this specifi...
