20059 matches found
The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the F function. Exploiting this vulnerability can allow an attacker to cause a service failure...
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
...
CVE-2024-20371
A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...
CVE-2024-20371
Cisco Nexus 3550‑F Switches contain an ACL denial rule enforcement issue that may allow an unauthenticated, remote attacker to send traffic to the device management interface. The root cause is that ACL deny rules are not properly enforced at reboot. Affected behavior: traffic that should be bloc...
CVE-2024-20371 Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...
CVE-2024-20371 Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...
Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...
PT-2024-8206 · Cisco · Cisco Nexus 3550-F Switches
Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3550-F Switches affected versions not specified Description: A vulnerability in the access control list ACL programming could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management...
CVE-2024-50531 WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to a Web Server.This issue affects RSVPMaker for Toastmasters: from n/a through = 6.2.4...
CVE-2024-50531 WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to a Web Server.This issue affects RSVPMaker for Toastmasters: from n/a through = 6.2.4...
The vulnerability of the acdb25.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of the acdb25.dll library in AutoCAD simulation, design, and drawing software relates to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary code, or cause a service failu...
CVE-2024-10741
A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...
Mitsubishi Electric MELSEC iQ-F FX5-OPC Denial of Service (CVE-2024-0727)
A Denial-of-Service DoS vulnerability due to NULL Pointer Dereference when processing PKCS12 format certificate exists in OpenSSL installed on MELSEC iQ-F OPC UA Unit. Because OpenSSL does not correctly check if a certain field in the PKCS12 format certificate is NULL, a NULL pointer dereference...
The vulnerability of the command-line interface (CLI) of the software-defined security solutions FortiDDoS and FortiDDoS-F allows a attacker to execute arbitrary commands.
The vulnerability of the command-line interface CLI of software-defined security solutions like FortiDDoS and FortiDDoS-F lies in the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute...
Mitsubishi Electric MELSEC iQ-F FX5-OPC
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-F FX5-OPC Vulnerability : NULL Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to...
Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery
Overview Multiple Alps System Integration products and the OEM products contain a cross-site request forgery vulnerability CWE-352. Yoshiaki komeyama of KOBELCO SYSTEMS CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...
SAP /sap/bc/soap/rfc SOAP Service TH_SAPREL Function Information Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, or is a port of a plugin available in the Onapsis Bizploit Opensource ERP Penetration Testing framework -...
CVE-2022-48895
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Don't unregister on shutdown Michael Walle says he noticed the following stack trace while performing a shutdown with "reboot -f". He suggests he got "lucky" and just hit the correct spot for the reboot while ther...
CVE-2022-48895
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Don't unregister on shutdown Michael Walle says he noticed the following stack trace while performing a shutdown with "reboot -f". He suggests he got "lucky" and just hit the correct spot for the reboot while ther...
