CVE-2024-1150 Improper validation of update packages

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1...

CVE-2024-1149 Improper validation of update packages

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0;...

SQL Injection

SQLAlchemyDA is vulnerable to SQL Injection. The vulnerability is due to improper validation of SQL statements within the SQLAlchemyDA instance. This issue can be exploited by an attacker to execute arbitrary SQL statements in the database...

Arbitrary File Upload

mingSoft is vulnerable to Arbitrary File Upload. The vulnerability is due to improper validation when uploading files within the following POST request /ms/file/upload.do. This issue can be exploited by an attacker to upload arbitrary files...

Improper Validation

vyper is vulnerable to Improper Validation. The vulnerability is caused due to a miscalculation in stack management during the compilation of the sha364 operation in the IR. This could allow an attacker to manipulate the input and exploit the error in stack management during compilation...

CVE-2023-47148

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599...

Input validation

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599...

CVE-2023-47148

Summary of CVE-2023-47148 : IBM Storage Protect Plus Server Admin Console (versions 10.1.0–10.1.15.2) could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints. The issue is rooted in insecure endpoint handling, enabling information disclosure...

Unverified Password Change

OctoPrint is vulnerable to Unverified Password Change. The vulnerability is due to improper validation within the password change functionality for admin accounts. The issue can be exploited to a malicious admin to change the passwords of other admin account...

Denial Of Service (DoS)

github.com/moby/buildkit is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation for requests from BuildKit clients or frontends, allowing an attacker to craft a request that causes the BuildKit daemon to crash...

Missing Entitlement Check

github.com/moby/buildkit is vulnerable to Missing Entitlement Check. The vulnerability due to improper validation of the security.insecure entitlement flag within the BuildKit APIs. An attacker can run a malicious container with elevated permissions as a result of this flaw...

Protection Mechanism Failure

dotnet is vulnerable to Protection Mechanism Failure. The vulnerability is due to improper validation of X.509 certificates, allowing an attacker to submit a certificate containing a malformed signature which returns an incorrect failure code. While the certificate will be correctly rejected, an...

Rockwell Automation LP30/40/50 and BM40 Operator Interface

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : LP30, LP40, LP50, and BM40 Operator Panels Vulnerability : Improper Validation of Consistency within Input, Out-of-bounds Write, Stack-based Buffer Overflow,...

PT-2024-14791 · Smodbip +1 · Smodbip +1

Name of the Vulnerable Software and Affected Versions: MegaBIP versions up to 4.36.2 SmodBIP all versions Description: The issue is related to an Improper Input Validation vulnerability that allows for Stored XSS. This vulnerability affects MegaBIP in versions up to 4.36.2 and SmodBIP in all...

Divide-By-Zero

libmupdf.so is vulnerable to Divide-By-Zero. The vulnerability is due to pnmbinaryreadimage function within load-pnm.c there is no proper validation of input PNM image data, leading to incorrect calculations of image parameters. This results in scenarios where the function attempts to divide a...

Fedora 38 : gtkwave (2024-c990070fa4)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c990070fa4 advisory. Cumulative bug-fix update. This update includes fixes for multiple security issues found by Talos in which specially crafted input files could lead ...

CVE-2023-20271

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of...

CVE-2023-20257

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker cou...

CVE-2023-20257

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker cou...

Path Traversal

Apache Shiro is vulnerable to Path Traversal Vulnerability. The vulnerability is due to improper validation and sanitization of respective path before processing. This issue can be exploited by an attacker to perform authentication bypass...