61 matches found
📄 EMQX 5.8.5 Remote Code Execution
A remote code execution vulnerability exists in the EMQX Dashboard component of EMQX, up to and including version 5.8.5. Authenticated users can upload plugins containing arbitrary code, including any kind of Erlang code, which may be executed on the server hosting the web interface. This is...
CVE-2024-10965
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The pat...
CVE-2024-10964
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handleaddplugin in the library cmd.library of the file plugins/restful/pluginhandle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is...
CVE-2024-10965
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The pat...
CVE-2024-10964
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handleaddplugin in the library cmd.library of the file plugins/restful/pluginhandle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is...
CVE-2024-10965 emqx neuron JSON File schema information disclosure
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The pat...
CVE-2024-10965 emqx neuron JSON File schema information disclosure
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The pat...
CVE-2024-10965 emqx neuron JSON File schema information disclosure
A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The pat...
CVE-2024-10964 emqx neuron plugin_handle.c handle_add_plugin buffer overflow
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handleaddplugin in the library cmd.library of the file plugins/restful/pluginhandle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is...
CVE-2024-10964 emqx neuron plugin_handle.c handle_add_plugin buffer overflow
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handleaddplugin in the library cmd.library of the file plugins/restful/pluginhandle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is...
CVE-2024-10964 emqx neuron plugin_handle.c handle_add_plugin buffer overflow
A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handleaddplugin in the library cmd.library of the file plugins/restful/pluginhandle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is...
CVE-2024-10964
CVE-2024-10964 affects EMQX Neuron up to 2.10.0. The vulnerability is in the function handle_add_plugin in the library file plugins/restful/plugin_handle.c , where a manipulation leads to a buffer overflow . The issue is exploitable remotely, per the provided CVE descriptions. A patch is recommen...
PT-2024-16669 · Emq · Emqx Neuron
Name of the Vulnerable Software and Affected Versions: emqx neuron versions up to 2.10.0 Description: A vulnerability was found in emqx neuron, affecting an unknown functionality of the file "/api/v2/schema" of the component JSON File Handler. This leads to information disclosure and can be...
CVE-2023-37781
An issue in the emqxsn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file...
CVE-2023-37781
An issue in the emqxsn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file...
Directory traversal
An issue in the emqxsn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file...
PT-2023-26104 · Emqx · Emqx +1
Name of the Vulnerable Software and Affected Versions: EMQX version 4.3.8 Description: An issue in the emqx sn plugin allows attackers to execute a directory traversal via uploading a crafted .txt file. Recommendations: For EMQX version 4.3.8, consider restricting access to the emqx sn plugin unt...
CVE-2023-37781
An issue in the emqxsn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file...
CVE-2023-37781
CVE-2023-37781 affects EMQX 4.3.8 via the emqx_sn plugin. The issue allows directory traversal by uploading a crafted .txt file, enabling an attacker to access files outside the intended directory. Connected sources confirm the affected product/component as EMQX and the emqx_sn plugin; root cause...