CVE-2024-29951

Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection...

The vulnerability of the `fetch()` function in HTTP/1.1 of the Node.js software platform allows a attacker to cause a service failure.

The vulnerability of the fetch function in HTTP/1.1 in Node.js software platforms is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

PT-2024-2443 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 Description: A critical issue has been found in the setSchedWifi function of the /goform/openSchedWifi file, which can lead to a stack-based buffer overflow when the schedStartTime argument is manipulated. This...

PT-2024-19583 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A problematic vulnerability was found in the Chat Book component of the boyiddha Automated-Mess-Management-System, specifically in the file /member/chat.php. The manipulation ...

CVE-2023-38362

IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses. IBM X-Force ID: 260814...

PT-2024-16042 · Wanhu · Wanhu Ezoffice

Name of the Vulnerable Software and Affected Versions: Wanhu ezOFFICE version 11.1.0 Description: A critical issue has been found in the processing of the file defaultroot/platform/bpm/work flow/operate/wf printnum.jsp. The manipulation of the recordId argument leads to sql injection. The attack...

PT-2024-1433 · Unknown · Machinesense

Name of the Vulnerable Software and Affected Versions: MachineSense affected versions not specified Description: The MachineSense application programmable interface API is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive...

CVE-2024-0483

A vulnerability classified as critical was found in Taokeyun up to 1.0.5. This vulnerability affects the function index of the file application/index/controller/app/Task.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The attack can be...

PT-2024-15375 · Unknown · Rrj Nueva Ecija Engineer Online Portal

Name of the Vulnerable Software and Affected Versions: RRJ Nueva Ecija Engineer Online Portal version 1.0 Description: A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, which has been classified as problematic. The issue affects an unknown function of the file...

PT-2023-9070 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3,...

PT-2023-32116 · Delta Electronics · Wplsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics WPLSoft version 2.51 Description: A vulnerability was found in the Modbus Handler component, leading to cleartext transmission of sensitive information. The attack can be launched remotely, with a rather high complexity and...

CVE-2022-47848

An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...

The vulnerability in the data_sources.php script of the Cacti network monitoring software allows a hacker to perform cross-site scripting attacks.

The vulnerability in the datasources.php script of the Cacti network monitoring software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CP-Plus DVR 安全漏洞

CP-Plus DVR is a digital video recorder from CP-Plus. A security vulnerability exists in CP-Plus DVR that stems from improper input handling, which allows an unauthenticated, remote attacker to obtain sensitive information on a target device by sending a specially crafted HTTP request to the...

CVE-2023-32468

Dell ECS Streamer, versions prior to 2.0.7.1, contain an insertion of sensitive information in log files vulnerability. A remote malicious high-privileged user could potentially exploit this vulnerability leading to exposure of this sensitive data...

PT-2023-20699 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /classes/Master.php?f=delete item. This issue leads to sql injection and can be exploite...

PT-2023-19480 · Unknown · Control Id Rhid

Name of the Vulnerable Software and Affected Versions: Control iD RHiD version 23.3.19.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /v2//add/department. The manipulation of the Name argument leads to cross-site scripting. This issue can be...

CVE-2023-2385

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ikepolicies.htm of the component Web Management Interface. The manipulation of the argument IpsecIKEPolicy.IKEPolicyName...

The vulnerabilities of encryption algorithms such as PKCS#1 v1.5, RSA-OEAP, and RSASVE in the OpenSSL cryptographic library allow attackers to execute the Bleichenbacher attack.

The vulnerability of encryption algorithms such as PKCS1 v1.5, RSA-OEAP, and RASSEV in the OpenSSL cryptographic library is related to the creation of a secondary synchronization channel due to time differences. Exploiting this vulnerability can allow an attacker operating remotely to execute a...

PT-2023-17206 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot version 3.5.0 Description: A vulnerability was found in the file SysDictMapper.java of the component Sleep Command Handler, leading to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public...