CVE-2023-44189 Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

CVE-2023-4957 Authentication Bypass on Zebra ZTC

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

PT-2023-6311 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS QFX5000 Series versions prior to 20.4R3-S6 Juniper Networks Junos OS QFX5000 Series versions 21.1 prior to 21.1R3-S5 Juniper Networks Junos OS QFX5000 Series versions 21.2 prior to 21.2R3-S5 Juniper Networks Junos OS...

CVE-2023-44959

CVE-2023-44959 affects D-Link DSL-3782 (v1.03 and earlier). The vulnerability allows remote authenticated attackers to execute arbitrary code as root via the network settings page (Router IP Address field). Related materials in connected docs reference CVE-2023-27216 for the same device and show ...

CVE-2023-32972

CVE-2023-32972 affects QNAP QTS/QTS hero/QTScloud line: a buffer copy without input size checking can allow an authenticated administrator to execute code over the network. Root cause is improper input size handling in the affected component; no exploit details are provided in the documents. Affe...

CVE-2023-32971

Summary: CVE-2023-32971 is a buffer copy without input size checking that affects multiple QNAP OS releases. Affected products/areas: QTS and QuTS hero/QuTScloud family (QTS 5.0.1.2425+, QTS 5.1.0.2444+, QTS 4.5.4.2467+, QuTS hero h5.0.1.2515+, h5.1.0.2424+, h4.5.4.2476+, QuTScloud c5.1.0.2498+)....

(0Day) D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of...

CVE-2023-3654

CVE-2023-3654 affects cashIT! devices from PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH up to version 2023.02.37. The issue is an origin bypass via the HTTP Host header, triggered by an HTTP endpoint exposed to the network. The root cause is a host-header-based origin check bypass, enabling u...

CVE-2023-3770

CVE-2023-3770 describes an incorrect input validation vulnerability in Ingeteam’s INGEPAC DA devices. The flaw allows an attacker on the same network to use the UDP discovery port (1925/UDP) to obtain device‑specific information without authentication. Affected component is the data validation on...

CVE-2023-3769

CVE-2023-3769 is an input‑validation flaw reported in Ingeteam components (INGEPAC EF/DA) that can be exploited over the network to fuzz and trigger a DoS via the MMS protocol, potentially rebooting the device and services. The connected sources cite affected firmware/versions (e.g., INGEPAC DA34...

CVE-2023-3768

CVE-2023-3768 affects Ingeteam’s INGEPAC EF/DA family (e.g., INGEPAC DA3451 firmware 0.29.2.42 and INGEPAC FC5066 firmware 9.0.22.6+6.1.1.22+5.3.1.1). The root cause is an input validation error that could enable an attacker with network access to perform fuzzing against MMS protocol handling, en...

CVE-2023-20033

Cisco IOS XE Software for Catalyst 3650 and 3850 Series Switches is affected by CVE-2023-20033. The root cause is improper resource management when processing traffic on the management interface, allowing an unauthenticated, remote attacker to inject a high rate of traffic and cause the device to...

Design/Logic Flaw

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in othe...

CVE-2023-39376

SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A security...

PT-2023-6228 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved on PTX10003 Series versions prior to 21.4R3-S4-EVO Juniper Networks Junos OS Evolved on PTX10003 Series version 22.1 versions prior to 22.1R3-S3-EVO Juniper Networks Junos OS Evolved on PTX10003 Series versio...

blurhash panics on parsing crafted inputs

Impact The blurhash parsing code may panic due to multiple panic-guarded out-of-bounds accesses on untrusted input. In a typical deployment, this may get triggered by feeding a maliciously crafted blurhashes over the network. These may include: - UTF-8 compliant strings containing multi-byte UTF-...

CVE-2022-47557

CVE-2022-47557 affects Ormazabal ekorCCP and ekorRCI. A vulnerability could allow an attacker with local network access to decrypt privileged-user credentials and subsequently gain access to the system to perform malicious actions. The provided sources describe the impact (credential decryption a...

CVE-2023-29245

Nozomi Networks Guardian and CMC are affected by CVE-2023-29245 due to improper input validation in Asset Intelligence fields, enabling SQL Injection. An unauthenticated attacker could send crafted packets to execute arbitrary SQL on the backend DBMS, potentially exfiltrating data, altering schem...

Moderate: Red Hat Security Advisory: RHACS 4.2 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...