CVE-2024-10610 ESAFENET CDG ProtocolService.java delProtocol sql injection

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-10610 ESAFENET CDG ProtocolService.java delProtocol sql injection

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-10610

CVE-2024-10610 affects ESAFENET CDG v5, specifically the function delProtocol in /com/esafenet/servlet/system/ProtocolService.java. The vulnerability arises from unsafe handling of the id argument, enabling a SQL injection that can be exploited remotely. Exploitation has been disclosed publicly; ...

CVE-2024-48352

Yealink Meeting Server (YMS) prior to version 26.0.0.67 is vulnerable to sensitive data exposure in server responses when an HTTP request with an enterprise ID is sent. The CVE-2024-48352 entry details a high-severity issue (CVSSv3.1 7.5) with network vector, low attack complexity, and no privile...

The vulnerability of the YouGile project management service, related to inconsistencies in responses to incoming requests, allows a hacker to disclose protected information.

The vulnerability of the YouGile project management service is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

openSUSE: Security Advisory for uwsgi (SUSE-SU-2024:3853-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : uwsgi (SUSE-SU-2024:3853-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3853-1 advisory. - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules bsc1222332 Tenable has extracted the preceding description block directly from the...

CVE-2024-10595

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-10597

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10597 ESAFENET CDG PolicyActionService.java delPolicyAction sql injection

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10595

CVE-2024-10595 affects ESAFENET CDG 5. The vulnerability is in the function delFile/delDifferCourseList of /com/esafenet/servlet/ajax/PublicDocInfoAjax.java, leading to SQL injection. It can be exploited remotely; the exploit has been disclosed publicly. Multiple sources describe this as a critic...

CVE-2024-10595 ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-10594

ESAFENET CDG 5 vulnerability CVE-2024-10594 affects the docHistory function in /com/esafenet/servlet/fileManagement/FileDirectoryService.java. Manipulation of the fileId parameter results in SQL injection, enabling remote exploitation. Public exploit details exist per disclosures, and vendor resp...

CVE-2024-10594 ESAFENET CDG FileDirectoryService.java docHistory sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack...

CVE-2024-10006

A flaw was found in HashiCorp Consul and Consul Enterprise. The server response does not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and can lead to reflected cross-site scripting XSS. Mitigation Mitigation for this issue is either not available o...

LottieFiles Issues Warning About Compromised "lottie-player" npm Package

LottieFiles has revealed that its npm package "lottie-player" was compromised as part of a supply chain attack, prompting it to release an updated version of the library. "On October 30th 6:20 PM UTC - LottieFiles were notified that our popular open source npm package for the web player...

Security update for uwsgi

This update for uwsgi fixes the following issues: CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules bsc1222332 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2024:3853-1 Security update for uwsgi

This update for uwsgi fixes the following issues: - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules bsc1222332...

CVE-2024-43383 Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

MAL-2024-10303 Malicious code in gyaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb67552bd91849ea3638c757ce2ae5d51fb7953df212be9ece860b2453b9b314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...