398 matches found
CVE-2024-52869: Improper Preservation of Permissions
Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. Specifically, when there is an operating system move from SUSE Enterprise Linux Server SLES 12 Service Pack SP 2 or 3 to SLES 15 SP2 on Teradata Database systems, some...
ksmbd Mountd DoS
The vulnerability of the “demon ksmbd.mountd” of the file server “ksmbd” fs/smb/server/ksmbdnetlink.h in the Linux operating system is related to the issue of operations going beyond the buffer in memory when processing IPC responses. Exploiting this vulnerability can allow an attacker to cause a...
Linux SMB decrypt_raw_data() Buffer Overflow
The vulnerability of the decryptrawdata function in the fs/smb/client/smb2ops.c module of the SMB subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
CVE-2024-51358
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...
CVE-2024-51358
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...
CVE-2024-51358: Server-Side Request Forgery (SSRF)
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...
CVE-2024-51358
An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application...
CVE-2024-51358
Linux Server Heimdall version v.2.6.1 is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) within its Add new application function. A remote attacker can exploit this by providing a crafted script to trigger the execution of arbitrary code . The impact of this vulnerability is rated as...
PT-2024-34604 · Unknown · Linux Server Heimdall
Name of the Vulnerable Software and Affected Versions: Linux Server Heimdall version 2.6.1 Description: An issue in Linux Server Heimdall allows a remote attacker to execute arbitrary code via a crafted script to the "Add new application" endpoint. Recommendations: For Linux Server Heimdall versi...
Exploit for Code Injection in Vmware Spring_Cloud_Data_Flow
Use dnslog to detect whether CVE-2024-37084 vulnerability exi...
SMB Protocol Server Heap Buffer Overflow DoS
The vulnerability of the smb2getdataarealen function in the fs/smb/server/smb2misc.c module of the SMB protocol server implementation in Linux operating systems is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...
1Panel Linux Server SQL Injection Unauthorized Access Arbitrary Code
The vulnerability of the 1Panel Linux server’s control panel is related to the lack of measures taken to protect the SQL query structure when processing the orderBy parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information and execute arbitra...
CVE-2024-39911 1Panel SQL injection
1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addressed in version 1.10.12-lts. Users are advised to upgrade. There are no known workarounds for this vulnerability...
CVE-2024-39911 1Panel SQL injection
1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addressed in version 1.10.12-lts. Users are advised to upgrade. There are no known workarounds for this vulnerability...
CVE-2024-39907 a sqlinjection in 1Panel
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...
CVE-2024-39907 a sqlinjection in 1Panel
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...
CVE-2024-39907 a sqlinjection in 1Panel
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...
CVE-2024-31504
Buffer Overflow vulnerability in SILA Embedded Solutions GmbH freemodbus v.2018-09-12 allows a remtoe attacker to cause a denial of service via the LINUXTCP server component...
SILA Embedded Solutions GmbH freemodbus Security Vulnerability
SILA Embedded Solutions Freemodbus is an open source Modbus protocol stack from SILA Embedded Solutions. A security vulnerability exists in SILA Embedded Solutions GmbH freemodbus version 2018-09-12, which stems from a buffer overflow vulnerability allows remote attackers to cause a denial of...