SICK FTMg 资源管理错误漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of uncontrolled resource consumption, which could allow a remote attacker to compromise the availability of a web server by invoking a Slowloris-style attac...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of improper access control, which allows an unprivileged remote attacker to gain unauthorized access to data fields via the REST interface using an...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of improper access control, which allows an unprivileged remote attacker to download a file using an unprivileged account via the REST interface...

PT-2023-18954 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue is related to improper access control, allowing an unprivileged remote attacker to gain unauthorized access to dat...

SUSE CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Open vSwitch vulnerability (USN-6068-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6068-1 advisory. David Marchand discovered that Open vSwitch incorrectly handled IP packets with the protocol set to 0. A remote attacker could possibly us...

CVE-2022-41646

Insufficient control flow management in the IntelR IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access...

CVE-2022-37409

Insufficient control flow management for the IntelR IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-37409

Insufficient control flow management for the IntelR IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Insufficient control flow management for the IntelR IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Insufficient control flow management in the IntelR IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access...

CVE-2022-41646

Insufficient control flow management in the IntelR IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access...

CVE-2022-37409

Insufficient control flow management for the IntelR IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-14007 · Intel · Intel Ipp Cryptography

Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to insufficient control flow management, which may allow an unauthenticated user to potentially enable information disclosure via local access...

PT-2023-13536 · Intel · Intel Ipp Cryptography

Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable information disclosure via local access...

kernel: bpf, arm64: Fixed a BTI error on returning to patched function

A control-flow integrity flaw was found in the Linux kernel on the arm64 architecture within the extended Berkeley Packet Filter trampoline return path. Returning to a patched function with an instruction sequence that fails the branch-target security check can trigger an exception and panic. A...

kernel: netfilter: flowtable_offload: fix using __this_cpu_add in preemptible

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtableoffload: fix using thiscpuadd in preemptible flowoffloadqueuework can be called in workqueue without bh disabled, like the call trace showed in my actct testing, calling NFFLOWTABLESTATINC there would cause a...

Intel® IPP Cryptography Advisory

Summary: Potential security vulnerabilities in Intel® Integrated Performance Primitives IPP Cryptography software may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37409 Description: Insufficie...

flow-cares.ai Cross Site Scripting vulnerability OBB-3295648

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30094

A stored cross-site scripting XSS vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module...