4168 matches found
Silicon Labs Z-Wave 700和800 安全漏洞
Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are a series of chips from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs SiLabs Z-Wave Series versions 700 and 800 v7.21.1 that stems from insecure privilege management. An attacker...
PT-2024-34459 · Silicon · Z-Wave Series 700 +1
Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: Insecure permissions in the software allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...
CVE-2024-50924
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...
PT-2024-34456 · Silicon · Z-Wave Series 700 +1
Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: The issue is related to insecure permissions in the Silicon Labs SiLabs Z-Wave Series 700 and 800, which allows attackers to cause a Denial of Service DoS by repeatedly...
CVE-2024-50930
CVE-2024-50930 affects Silicon Labs Z-Wave Series 500, specifically version 6.84.0. The issue allows attackers to execute arbitrary code. The available connected docs confirm the product/version and the impact but do not provide root-cause details or exploit specifics. Mitigation guidance in PT S...
PT-2024-34455 · Silicon · Z-Wave Series 700/800
Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: The issue concerns insecure permissions in the software, allowing attackers to create a fake node by supplying crafted packets. Recommendations: For Silicon Labs SiLabs...
CVE-2024-50929
Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service DoS...
PT-2024-34461 · Silicon · Z-Wave Series 500
Name of the Vulnerable Software and Affected Versions: Silicon Labs Z-Wave Series 500 version 6.84.0 Description: An issue in Silicon Labs Z-Wave Series 500 allows attackers to execute arbitrary code. Recommendations: For version 6.84.0, update to a newer version that contains a fix for this issu...
CVE-2024-50921
Silicon Labs Z-Wave Series 700 and 800, version 7.21.1, are affected by an insecure permissions issue (insecure privilege management). This vulnerability allows an attacker to cause a Denial of Service by repeatedly sending specially crafted packets to the controller, leading to availability impa...
CVE-2024-53791
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows DOM-Based XSS.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...
CVE-2024-53790
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...
CVE-2024-53791 WordPress Lenxel Core plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows DOM-Based XSS.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...
CVE-2024-53791 WordPress Lenxel Core plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS allows Stored XSS.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through 1.2.5...
CVE-2024-53791
CVE-2024-53791 describes a Stored XSS in WordPress Lenxel Core plugin for Lenxel(LNX) LMS (Lenxel Core) with affected versions from n/a through 1.2.5. Root cause is improper input neutralization during web page generation. Exploitation could allow an attacker to inject scripts that run in the con...
CVE-2024-53790
CVE-2024-53790 corresponds to a Local File Inclusion/path traversal issue in the WordPress Lenxel Core plugin for Lenxel(LNX) LMS (Lenxel Core). Public details in connected sources indicate vulnerable versions include Lenxel Core up to 1.2.5, with Patchstack citing fixes up to 1.2.8. The root cau...
CVE-2024-53790 WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...
CVE-2024-53790 WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...
CVE-2024-53809
Cross-Site Request Forgery CSRF vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a through = 2.6.4.1...
CVE-2024-53809
CVE-2024-53809 : A Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress plugin Namaste! LMS (Kiboko Labs) up to version 2.6.4.1. The CVE entry notes exposure across Namaste! LMS versions ≤ 2.6.4.1 and lists a MEDIUM (CVSS v3.1: 4.3) impact. Connected sources repeatedly describe t...
