6770 matches found
CVE-2024-34043
The O-RAN RICAPP kpimon-go I-Release software is susceptible to a segmentation violation triggered by a specific E2AP-PDU message . This vulnerability allows for a potential crash or instability within the RIC application. While the CVSS 3.1 score indicates a Medium severity (5.3) with Low privil...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34047
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...
CVE-2024-34044
The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL...
CVE-2024-34047
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34046
The O-RAN E2T I-Release software contains a vulnerability where the Prometheus metric Increment function can cause a crash in sctpThread.cpp. The issue specifically occurs when the Increment() function is called for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCo...
PT-2024-25664 · O Ran · O-Ran Ric I-Release E2Mgr
Name of the Vulnerable Software and Affected Versions: O-RAN RIC I-Release e2mgr affected versions not specified Description: The issue is related to a lack of array size checks in the RicServiceUpdateHandler of the O-RAN RIC I-Release e2mgr. Recommendations: At the moment, there is no informatio...
CVE-2024-34045
The O-RAN E2T I-Release software contains a vulnerability where the Prometheus metric Increment function can cause a crash. Specifically, the crash occurs within sctpThread.cpp when the Increment() function is invoked for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2set...
CVE-2024-34048
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler...
CVE-2024-34044
The O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because peerInfo can be NULL...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
CVE-2024-34048
The O-RAN RIC I-Release e2mgr software contains a security vulnerability due to missing array size checks in the E2nodeConfigUpdateNotificationHandler component. This improper validation of array indices can lead to memory safety issues. While the CVSS v3.1 score is 9.8 (CRITICAL) , indicating a ...
WordPress Print-O-Matic Plugin <= 2.1.10 is vulnerable to Cross Site Scripting (XSS)
Software Print-O-Matic Type Plugin Vulnerable versions = 2.1.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33936 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5b4761232408 Credits Ngô Thiên An ancorn from VNPT-VCI Require...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34044
The O-RAN E2T I-Release application contains a NULL pointer dereference vulnerability within the buildPrometheusList function. This issue occurs because the peerInfo variable can be NULL , potentially leading to application instability or a crash. While the specific affected versions are not deta...
CVE-2024-34043
O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
Oracle Linux 9 : cri-o (ELSA-2024-12347)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12347 advisory. - Address CVE-2024-24786 cri-tools - Address CVE-2024-24786 etcd - Address protobuf CVE-2024-24786 - Address protobuf CVE-2024-24786 - Backport from...