CVE-2024-28023

The CVE-2024-28023 entry concerns a vulnerability in the message queueing mechanism used by Hitachi Energy FOXMAN-UN / UNEM (Hitachi FOXMAN-UN server and related APIGateway components). Connected documents corroborate a risk that exploitation could lead to exposure of resources or functionality t...

CVE-2024-28023

A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or even execute arbitrary code...

CVE-2023-5751 CODESYS: Development system prone to DoS through exposure of resource to wrong sphere

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere...

CVE-2024-21813

Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21813

CVE-2024-21813 relates to Intel DTT software installers exposing resources to the wrong sphere, enabling privilege escalation via local access for an authenticated user. The issue is documented by Intel as a vulnerability in DTT software installers with CVSS v3.1 base score 7.9 (High) and local a...

CVE-2024-21813

Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-39478 Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability

Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this...

Docker Engine 26.0.0 < 26.0.2 Unexpected Resource Exposure

The version of the Docker Engine installed on the remote host is 26.0.x prior to 26.0.2. It is therefore affected by an unexpected resource exposure vulnerability. In the affected versions of Moby, an open source container framework that is a key component of Docker Engine, Docker Desktop, and...

CVE-2024-21605

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

CVE-2024-21605 Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

Ametys CMS 安全漏洞

Ametys Cms is used by the Ametys community to run large enterprise websites, blogs, Intranet and Extranet on the same server. a free open source content management system written in Java. A security vulnerability exists in Ametys CMS v4.5.0 and earlier versions. An attacker can exploit this...

Exploit for Exposure of Resource to Wrong Sphere in N8N

Exploit for CVE-2023-27564 This vulnerability allows anonymou...

PYSEC-2024-125

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

CVE-2024-24825 TokenManager not checking permissions on cached tokens in DIRAC

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

Exploit for File Descriptor Leak in Linuxfoundation Runc

Vulnerability Reproduction CVE-2024-21626: docker runc es...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626-POC Instructions For educational/research pu...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626-POC Instructions For educational/research pu...

GHSA-8F57-WCMG-4JMH Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere

Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to...

PT-2023-29947 · Calibre · Calibre

Name of the Vulnerable Software and Affected Versions: calibre versions prior to 6.19.0 Description: The issue allows adding resources outside of the document root by default, due to the link to local path in ebooks/conversion/plugins/html input.py. Recommendations: For versions prior to 6.19.0,...

Hitachi Energy AFS65x,AFF66x, AFS67x, and AFR67x Series Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Hitachi Energy Equipment : AFS65x, AFF66x, AFS67x, AFR67x Series Vulnerabilities : Incorrect Calculation, Integer Overflow or Wraparound, Improper Encoding or Escaping of Output, Exposure of...