PT-2024-23841 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is an Out-of-bounds Read vulnerability in the Open Networking Foundation ONF libfluid, specifically in the libfluid msg module. It is associated with the program routine fluid...

PT-2024-23840 · Open Networking Foundation · Libfluid

Name of the Vulnerable Software and Affected Versions: libfluid version 0.1.0 Description: The issue is related to an Improper Null Termination vulnerability in the libfluid msg module of the Open Networking Foundation ONF libfluid. This vulnerability is associated with the program routine fluid...

PT-2024-39304 · Circutor · Circutor Tcp2Rs+

Name of the Vulnerable Software and Affected Versions: CIRCUTOR TCP2RS+ version 1.3b Description: The issue allows an attacker to modify any configuration value without authentication by sending packets through the UDP protocol and port 2000, deconfiguring the device and thus disabling its use...

libfluid 安全漏洞

libfluid is an Open Networking open source application. A security vulnerability exists in libfluid that stems from the fact that the fluidmsg::of13::MultipartReplyPortDescription::unpack routine contains an out-of-bounds read vulnerability...

CVE-2023-28452

An issue was discovered in CoreDNS through 1.10.1. There is a vulnerability in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing denial of service for normal resolution. In an exploit, the attacker could just forge a response targeting the source port of a...

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results fro...

PT-2024-39272 · Cohesive Networks · Cohesive Networks Vns3

Name of the Vulnerable Software and Affected Versions: Cohesive Networks VNS3 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this issue. The specif...

PT-2024-39271 · Cohesive Networks · Cohesive Networks Vns3

Name of the Vulnerable Software and Affected Versions: Cohesive Networks VNS3 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this issue. The...

PT-2024-39270 · Cohesive Networks · Cohesive Networks Vns3

Name of the Vulnerable Software and Affected Versions: Cohesive Networks VNS3 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this issue. The...

PT-2024-39273 · Cohesive Networks · Cohesive Networks Vns3

Name of the Vulnerable Software and Affected Versions: Cohesive Networks VNS3 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this issue. The specif...

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results fro...

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8000 by default. The issue results from th...

Unspecified vulnerability in Linux kernel (CNVD-2024-39373)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle the device busy state when adding a serial port. No details of the vulnerabilit...

DEBIAN-CVE-2024-46706

In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsllpuart: mark last busy before uartaddoneport With "earlycon initcalldebug=1 loglevel=8" in bootargs, kernel sometimes boot hang. It is because normal console still is not ready, but runtime suspend is called, so...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle the device busy state when adding a serial port. No details of the vulnerabilit...

mySCADA myPRO Hard-Coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of mySCADA myPRO. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telnet service, which listens on TCP port 5005 by default. The issue results from the...

PT-2024-34016

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition issue has been resolved in the Linux kernel, specifically in the scsi: lpfc component. The problem occurred when deleting an NPIV instance, as it required all fabric...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2394)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel:ACPI: CPPC: Use accesswidth over bitwidth for system memory accessesCVE-2024-35995 ACPI: LPIT: Avoid u32 multiplication...

CVE-2024-20390

A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS on XML TCP listen port 38751. This vulnerability is due to a lack of proper error validation of ingress XML packets. An attacker could explo...

CVE-2024-20390

A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS on XML TCP listen port 38751. This vulnerability is due to a lack of proper error validation of ingress XML packets. An attacker could explo...