The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switches from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure when processing the Contact Information field in the Switch Information section. Exploiting this vulnerability allows an attacker to execute...

Delta Electronics DIAScreen Buffer Overflow Vulnerability (CNVD-2023-08070)

A buffer overflow vulnerability exists in Delta Electronics DIAScreen 1.2.1.23 and prior versions, which is caused by an improperly restricted operation in memory. The vulnerability is caused by an improperly restricted operation in memory, resulting in a buffer overflow that can be exploited to...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12621)

Dell PowerScale OneFS is a U.S. based Dell Dell company that provides the PowerScale OneFS operating system for scale-out NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by remote, unauthenticated attackers to cause information disclosure and remote execution...

CVE-2023-24576

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service nsrexecd irrespective of any auth used...

CVE-2021-37375

Cross Site Scripting XSS vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

Security Bulletin: Vulnerability in Node.js lodash affects IBM Process Mining (CVE-2021-23337,CVE-2020-28500)

Summary There is a vulnerability in Node.js lodash that could allow remote execution of arbitrary commands. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2021-23337 DESCRIPTION: Node.js...

Design/Logic Flaw

NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting...

CVE-2022-45101

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution...

CVE-2022-45101

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution...

Information disclosure

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution...

CVE-2022-45101

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution...

CVE-2022-45101

Dell PowerScale OneFS 9.0.0.x–9.4.0.x is affected by an NFS flaw described as Improper Handling of Insufficient Privileges, enabling a remote unauthenticated attacker to potentially cause information disclosure and remote code execution. The issue is tied to the NFS handling path and root cause i...

CVE-2022-24324

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Products: IGSS Data Server - IGSSdataServer.exe Versions prior to...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is a U.S. based Dell Dell company that provides the PowerScale OneFS operating system for scale-out NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by remote, unauthenticated attackers to cause information disclosure and remote execution...

EditorConfig 缓冲区错误漏洞

EditorConfig is an application of EditorConfig open source. Makes it easy to maintain the correct coding style when switching between different text editors and different projects. A security vulnerability exists in EditorConfig versions prior to 0.12.6. An attacker exploited the vulnerability to...

Control Web Panel Unauthenticated Remote Command Execution Exploit

Control Web Panel versions prior to 0.9.8.1147 are vulnerable to unauthenticated OS command injection. Successful exploitation results in code execution as the root user. The results of the command are not contained within the HTTP response and the request will block while the command is running...

Deserialization of untrusted data

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert Versions prior to V7.9.0...

Heap overflow

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in HSQLDB

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of HSQLDB. Vulnerability Details CVEID:CVE-2022-41853 DESCRIPTION: HSQLDB could allow a remote attacker to execute arbitrary code on the system, caused by improper validation of user-supplied input by...