11470 matches found
WAYOS FBM-291W 安全漏洞
WAYOS FBM-291W is a wireless router from WAYOS. A security vulnerability exists in WAYOS FBM-291W version v19.09.11. An attacker can exploit the vulnerability to execute commands via mspinfohtm...
EulerOS Virtualization 2.12.1 : tpm2-tss (EulerOS-SA-2024-2319)
According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...
CVE-2024-34463
BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. The packet data also lacks authentication and integrity protection...
EulerOS Virtualization 2.12.0 : tpm2-tss (EulerOS-SA-2024-2339)
According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...
CVE-2024-45305 gix-path uses local config across repos when it is the highest scope
gix-path is a crate of the gitoxide project dealing with git paths and their conversions. gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped...
SUSE-SU-2024:3077-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command bsc1227322...
CVE-2024-38402
Memory corruption while processing IOCTL call for getting group info...
CVE-2024-38402
CVE-2024-38402 is a memory corruption via a refcount leak in the Qualcomm ADSPRPC DSP driver (fastrpc_get_process_gids). The vulnerability can enable use-after-free of the group_info structure, exposing kernel memory through a non-saturating refcount that can overflow with repeated calls. Disclos...
CVE-2024-38402 Use After Free in DSP Services
Memory corruption while processing IOCTL call for getting group info...
OPENSUSE-SU-2024:0274-1 Security update for cacti, cacti-spine
This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: CVE-2024-34340: Authentication Bypass when using using older password hashes boo1224240 CVE-2024-25641: RCE vulnerability when importing packages boo1224229 CVE-2024-31459: RCE vulnerability when plugins include files...
CVE-2024-38382
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read...
PT-2024-25098 · Qualcomm · Snapdragon +173
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs when parsing the multi-link element Control field, specifically when a common...
JBoss Scanner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'JBoss Vulnerability Scanner', 'Description' = %q This module scans a JBoss instance for a few vulnerabilities. , 'Author' = 'Tyler Krpata', 'Zach...
SAP ICF /sap/public/info Service Sensitive Information Gathering
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, or is a port of a plugin available in the Onapsis Bizploit Opensource ERP Penetration Testing framework -...
Splunk __raw Server Info Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Splunk raw Server Info Disclosure ', 'Description' = %q Splunk 6.2.3 through 7.0.1 allows information disclosure by appending...
Use of Less Trusted Source
Overview Affected versions of this package are vulnerable to Use of Less Trusted Source via the handling of X-Forwarded-For or Client-Ip headers. An attacker can falsify their IP address in log files by specifying an arbitrary IP in these headers while making HTTP requests. Remediation Upgrade...
CVE-2024-7132
creationtimestamp| type| source ---|---|--- 2024-08-29 13:42:36+00:00| seen| https://t.me/cvedetector/4377...
D-Link DI_8004W msp_info_htm Function Command Execution Vulnerability
D-Link DI8004W is an Internet Behavior Management router designed for small and medium-sized businesses by AUO, supporting 40-50 devices to access the network at the same time. The D-Link DI8004W suffers from a command execution vulnerability that stems from the inclusion of the jhttpd mspinfohtm...
Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.
Summary IBM Application Performance Management is vulnerable to denial of service, remote code execution, information disclosures and other vulnerabilities due to bundled product IBM ® Db2. This bulletin identifies the steps to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-318...