Magento Open Source Improper Access Control vulnerability

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...

CVE-2024-34104 Adobe Commerce | Improper Authorization (CWE-285)

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both...

CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ‘XXE’ vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that...

PT-2024-4177 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which could result in arbitrary code execution. A high-privilege attacker could...

PT-2024-4485 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read and potentially result in arbitrary co...

Denial of Service (DoS)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Denial of Service DoS through the resource allocation process. An attacker can exhaust system resources, causing the application to slow down or crash by leveraging...

PT-2024-1794

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier Description The issue is related to an improper neutralization of special elements used in an OS command, which could lead to arbitrary code execution by an attacker. This...

PT-2023-9137 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts...

PT-2023-9138 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user...

graphicsmagick:coder_P7_fuzzer: Use-of-uninitialized-value in WritePNMImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5008645446828032 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderP7fuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

EMC RSA Archer < 6.7.0.3 Multiple Vulnerabilities

The version of EMC RSA Archer running on the remote web server is prior to 6.7.0.3 6.7 P3, 6.6 P6 6.6.0.6 or 6.5 P7 6.5.0.7. It is, therefore, affected by multiple vulnerabilities: - RSA Archer, versions prior to 6.7 P3 6.7.0.3, contain an information exposure vulnerability. An authenticated...

Design/Logic Flaw

In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the...

CVE-2017-3138 named exits with a REQUIRE assertion failure if it receives a null command string on its control channel

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of name...

Code injection

Huawei Ascend P7 allows remote attackers to cause a denial of service phone process crash...

CVE-2015-2245

Huawei Ascend P7 allows remote attackers to cause a denial of service phone process crash...

CVE-2015-2245

Huawei Ascend P7 allows remote attackers to cause a denial of service phone process crash...

CVE-2015-2245

CVE-2015-2245 affects Huawei Ascend P7 (Sophia-L09) running Android 4.4/EMUI 3.0. The vulnerability arises in the phone module when a third-party app sends specific broadcast messages or enables specific UIs, allowing remote-like triggering that leads to a denial of service (phone process crash)....

CVE-2015-2245: Improper Input Validation

Huawei Ascend P7 allows remote attackers to cause a denial of service phone process crash...

PT-2017-6559

Name of the Vulnerable Software and Affected Versions Huawei Ascend P7 affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a phone process crash. Recommendations At the moment, there is no information about a newer version that...

Huawei P7 and P8 Youth Edition GPU Driver Denial of Service Vulnerability

Huawei P7 and P8 Youth Edition are smartphone devices from Huawei, a Chinese company.GPU driver is one of the graphics drivers. A denial of service vulnerability exists in the GPU driver in the Huawei P7 and P8 Youth Edition. An attacker can exploit this vulnerability by tricking a user into...