2473 matches found
CVE-2024-43663 Buffer overflow vulnerabilities in CGI scripts lead to segfault
There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...
CVE-2024-6001
An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges...
Juniper Junos OS Vulnerability (JSA88134)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88134 advisory. - An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine pfe Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated,...
Oracle Siebel CRM (April 2014 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the April 2014 CPU advisory. - Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: OpenUI.. Supported versions that are affected are 8.1.1 and 8.2.2...
Improper Certificate Validation
Keycloak is vulnerable to Improper Certificate Validation. The vulnerability is due to improper handling of reverse proxy configurations with mTLS enabled, allowing an attacker on the local network to impersonate any user or client using mTLS for authentication...
CVE-2024-12343
TP-Link VN020 F3v(T) TT_V6.2.1021 is affected, specifically the SOAP Request Handler’s /control/WANIPConnection component where manipulating the NewConnectionType argument triggers a buffer overflow. This vulnerability requires local-network access and has public exploitation information, with po...
CVE-2024-45205
An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point not using UniFi Network Application could allow a malicious actor with access to an adjacent network to take control of this UniFi Access Point. Affected Products: UniFi iOS App Version 10.17.7 and...
CVE-2024-49038
Improper neutralization of input during web page generation 'Cross-site Scripting' in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network...
edk2: Integer overflows in PeCoffLoaderRelocateImage
A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...
PT-2024-8877 · Microsoft · Azure Policywatch
Name of the Vulnerable Software and Affected Versions: Microsoft Azure PolicyWatch affected versions not specified Description: The issue is related to a lack of authentication for a critical function in Microsoft Azure PolicyWatch, allowing an unauthorized attacker to elevate privileges over a...
CVE-2024-8805 BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within...
OESA-2024-2450 openjdk-11 security update
The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23...
Juniper Junos OS Multiple Vulnerabilities (JSA88136)
The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA88136 advisory. - An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon evo- pfemand of Juniper Networks Junos OS Evolved allows an...
edk2: Integer overflows in PeCoffLoaderRelocateImage
A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...
edk2: Integer overflows in PeCoffLoaderRelocateImage
A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...
Airlift.microsoft.com Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network...
PT-2024-33326 · Airlift · Airlift
Name of the Vulnerable Software and Affected Versions: Airlift affected versions not specified Description: The issue allows an authorized attacker to elevate privileges over a network by exploiting an authentication bypass vulnerability based on assumed-immutable data. Recommendations: At the...
VulnCheck KEV: CVE-2024-5910
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data...
Exploit for Injection in Oracle Agile_Plm
针对 loj4j2 CVE-2021-44228 漏洞的研究 实验平台 - VirtualBox 7.0.12 r159484 Qt5.15.2 - Attacker kali - 网络地址转换（NAT） - host-only 网络 192.168.56.101 - Victim kali 2023.3 - 网络地址转换（NAT） - host-only 网络 192.168.56.112 实验任务 - - x 搭建实验平台 - - x 漏洞存在性验证 以 loj4j2 CVE-2021-44228 为例 - - x 漏洞可利用验证 以 loj4j2 CVE-2021-44228 为例...
Fortinet Fortigate (FG-IR-21-155)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-155 advisory. - An integer overflow / wraparound vulnerability CWE-190 in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x;...