CVE-2024-44572: Improper Neutralization of Special Elements used in a Command

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...

CVE-2024-44571

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...

CVE-2024-44573

The RELY-PCIe intelligent pluggable board, specifically versions v22.2.1 through v23.1.0 , is susceptible to a stored cross-site scripting (XSS) vulnerability. This flaw exists within the VLAN configuration component, where an attacker can execute arbitrary web scripts or HTML by providing a craf...

CVE-2024-44573

A stored cross-site scripting XSS vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2024-31191

Name of the Vulnerable Software and Affected Versions RELY-PCIe versions 22.2.1 through 23.1.0 Description A command injection issue was discovered via the time date function. Recommendations For versions 22.2.1 through 23.1.0, as a temporary workaround, consider disabling the time date function...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12610)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12610 advisory. - MIPS: Octeon: Add PCIe link status check Dave Kleikamp Orabug: 36947196 CVE-2024-40968 - drm/amdgpu: Fix signedness bug in sdmav40processtrapirq...

PT-2024-31190 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to the failure of setting the Secure attribute for sensitive cookies in HTTPS sessions. This could cause the user agent to send those cookies in cleartext over an HTTP...

CVE-2024-44574

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysconf function...

CVE-2024-44570

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a code injection vulnerability via the getParams function in phpinf.php...

CVE-2024-44577

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the timedate function...

CVE-2024-44575

The RELY-PCIe smart pluggable board, specifically versions v22.2.1 through v23.1.0 , fails to set the Secure attribute for sensitive cookies during HTTPS sessions. This missing attribute can cause user agents to transmit these sensitive cookies in cleartext over an unencrypted HTTP session. To mi...

PT-2024-31186 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to incorrect access control in the mService function at the phpinf.php endpoint. This affects the ability to properly restrict access, potentially leading to...

CVE-2024-44572

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...

PT-2024-31189 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...

CVE-2024-44571

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...

CVE-2024-44574

The RELY-PCIe intelligent pluggable board, developed by Relyum, is vulnerable to a command injection vulnerability in versions v22.2.1 through v23.1.0 . The flaw exists within the sys_conf (or sys conf) function, which allows for potential exploitation via improper neutralization of special eleme...

CVE-2024-44571

The RELY-PCIe smart pluggable board from Relyum Spain, versions v22.2.1 through v23.1.0 , is vulnerable to a security issue due to incorrect access control within the mService function at the phpinf.php endpoint. This flaw allows for improper restriction of access, potentially enabling unauthoriz...

CVE-2024-44577: Improper Neutralization of Special Elements used in a Command

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the timedate function...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.335.4.el8 - mm: memcg/slab: enable kmalloc-cg- caches for x8664. Imran Khan Orabug: 36951041 - printk: add kthread for long-running print Stephen Brennan Orabug: 36456582 - kdb: Use the passed prompt in kdbpositioncursor Douglas Anderson - driver core: Fix ueventshow vs driver detach...

CVE-2024-44577

The Relyum RELY-PCIe , an intelligent pluggable board, is affected by a command injection vulnerability in versions v22.2.1 through v23.1.0 . The flaw exists within the time_date function , which allows for the improper neutralization of special elements used in a command. Exploitation details ar...