CVE-2024-45271

Consolidated data shows CVE-2024-45271 affects Helmholz Rex100 (wireless router). The vulnerability arises from improper input validation in config deployment, enabling an unauthenticated local attacker to gain admin privileges by deploying a configuration file. Publicly referenced advisories (e....

CVE-2024-9982

AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content...

CVE-2024-9982 ESi Technology AIM LINE Marketing Platform - SQL Injection

AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content...

CVE-2024-9982 ESi Technology AIM LINE Marketing Platform - SQL Injection

AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content...

CVE-2024-9982

CVE-2024-9982 affects Esi Technology’s AIM LINE Marketing Platform. The vulnerability arises from improper validation of a specific query parameter, enabling an unauthenticated attacker to inject arbitrary FetchXml commands when the LINE Campaign Module is enabled, with read/modify/delete access ...

ESi AIM LINE Marketing Platform SQL注入漏洞

ESi AIM LINE Marketing Platform is a marketing platform from ESi, Inc. A SQL injection vulnerability exists in ESi AIM LINE Marketing Platform versions 3.3.0 through 5.8.4, which stems from failure to properly validate a specific query parameter, and when the LINE Marketing module is enabled, an...

Arbitrary Argument Injection

ggit is vulnerable to Arbitrary Argument Injection. The vulnerability is due to the failure to sanitize user input and improper handling of command-line flags and doesn't validate the URL scheme or properly pass arguments to the git binary using the necessary -- POSIX characters, allowing attacke...

golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm

A flaw was discovered in Go's net/http standard library package. When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the...

Cloudlog 安全漏洞

Cloudlog is a self-hosted PHP application by the individual developer Peter Goodhall. Allows logging of amateur radio contacts from anywhere. A security vulnerability exists in Cloudlog version 2.6.15 that stems from allowing SQL injection via the id parameter of oqrs.php deleteoqrsline...

The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure, related to the failure to handle CRLF sequences properly, allows a violator to execute arbitrary code.

The vulnerability of Ivanti Connect Secure previously known as Pulse Connect Secure and Ivanti Policy Secure lies in the lack of measures to neutralize CRLF sequences. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges by...

CVE-2024-44954

...

CVE-2024-9916

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The attack may be launched remotely. The...

CVE-2024-46844

...

CVE-2024-47496

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service DoS. When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the...

CVE-2024-47496

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service DoS. When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the...

CVE-2024-47496 Junos OS: MX Series: The PFE will crash on running specific command

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS allows a local, low-privileged attacker to cause a Denial-of-Service DoS. When a specific command is executed, the pfe crashes. This will cause traffic forwarding to be interrupted until the...

CVE-2024-47496

CVE-2024-47496 affects Juniper Networks Junos OS on MX Series devices with MPC1–MPC9 line cards. A NULL pointer dereference in the Packet Forwarding Engine (pfe) can crash pfe when a specific command is run, causing traffic forwarding interruption and a sustained DoS until self-recovery. Affected...

[SECURITY] Fedora 40 Update: koji-1.35.1-1.fc40

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.16.0 release

Red Hat OpenShift Pipelines Client tkn for 1.16.0 has been released. Red Hat OpenShift Pipelines Client, tkn for the 1.16.0 release, provides a CLI tool to interact with the Pipelines and Triggers components provided by Red Hat OpenShift Pipelines 1.16.0 The tkn CLI tool is delivered as an RPM...

CVE-2024-45720

On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables e.g., svn.exe, etc. may lead to unexpected command line argument interpretation, including argument injection and execution of other programs, if a specially crafted command line...