3950 matches found
CVE-2024-33250
An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268Leo and SRS/4.0.195Leo allows a remote attacker to execute arbitrary code via a crafted request...
CVE-2024-33250
CVE-2024-33250 affects Open-Source Technology Committee SRS real-time video server RS/4.0.268 (Leo) and RS/4.0.195 (Leo). The issue allows a remote attacker to execute arbitrary code via a crafted request. Connected sources confirm affected version range 4.0.195–4.0.268 and indicate no explicit f...
CVE-2024-2454 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. The pins endpoint is susceptible to DoS through a crafted request...
CVE-2024-2454
Removed by vendor...
Apache InLong 代码问题漏洞
Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. A code execution vulnerability exists in Apache InLong, which can be exploited by an attacker to execute arbitrary code on a system...
D-Link DIR-845 安全漏洞
The D-Link DIR-845L is a wireless router from China-based AUO D-Link. The D-Link DIR-845L suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...
CVE-2023-37407 IBM Aspera Orchestrator command execution
IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116...
PT-2024-12613 · Ibm · Ibm Aspera Orchestrator
Name of the Vulnerable Software and Affected Versions: IBM Aspera Orchestrator version 4.0.1 Description: The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM Aspera Orchestrator version 4.0.1...
CVE-2024-25458
An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera circuit board identifier A9-48B-V1.0 firmware v.CYCAM48BBC01v870903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port...
CVE-2024-20376
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...
CVE-2024-20376
A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...
CVE-2024-24978
Denial-of-service DoS vulnerability exists in TvRock 0.9t8a. Receiving a specially crafted request by a remote attacker or having a user of TvRock click a specially crafted request may lead to ABEND abnormal end. Note that the developer was unreachable, therefore, users should consider stop using...
CVE-2024-24978
TvRock 0.9t8a has a DoS vulnerability that can trigger an ABEND via a specially crafted request, with exploitation possible by remote attackers or by users clicking the crafted request. The developer is unreachable, and multiple sources advise stopping use of TvRock 0.9t8a. No public patch or mit...
CYCZCAM A9 Camera 安全漏洞
CYCZCAM A9 Camera is a camera from CYCZCAM. A security vulnerability exists in the CYCZCAM A9 Camera that originates from allowing a remote attacker to obtain sensitive information by sending a crafted request to a UDP port...
CVE-2024-25458
An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera circuit board identifier A9-48B-V1.0 firmware v.CYCAM48BBC01v870903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port...
CVE-2024-33383
Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter...
CVE-2024-31801
Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted request...
CVE-2024-0840 Grandstream UCM Series IP PBX HTTP Parameter Injection
The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and...