29420 matches found
CVE-2024-43392
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWINCOMING.FROMIP FWINCOMING.INIP FWOUTGOING.FROMIP FWOUTGOING.INIP environment variable which can lead to a DoS...
CVE-2024-43392
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWINCOMING.FROMIP FWINCOMING.INIP FWOUTGOING.FROMIP FWOUTGOING.INIP environment variable which can lead to a DoS...
CVE-2024-43391
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWPORTFORWARDING.SRCIP environment variable which can lead to a DoS...
CVE-2024-43390
A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FWNAT.INIP environment variable which can lead to a DoS...
CVE-2024-43393 Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FWINCOMING.FROMIP FWINCOMING.INIP FWOUTGOING.FROMIP FWOUTGOING.INIP FWRULESETS.FROMIP FWRULESETS.INIP environment...
CVE-2024-43393
CVE-2024-43393 affects Phoenix Contact MGUARD (FL/TC MGUARD) devices. A low-privileged remote attacker can alter firewall configuration (packet filtering/forwarding, NAC, NAT) via the environment variables FW_INCOMING.FROM_IP, FW_INCOMING.IN_IP, FW_OUTGOING.FROM_IP, FW_OUTGOING.IN_IP, FW_RULESETS...
CVE-2024-43391
CVE-2024-43391 describes a DoS affecting Phoenix Contact FL/TC MGUARD devices. A low-privileged remote attacker can trigger configuration changes of firewall services by manipulating the FW_PORTFORWARDING.SRC_IP environment variable, potentially impacting packet filtering, forwarding, network acc...
September 10, 2024—KB5043092 (Security-only update)
None None...
September 10, 2024—KB5043135 (Monthly Rollup)
None None...
September 10, 2024—KB5043087 (Security-only update)
None None...
KB5042215 - Description of the security update for SQL Server 2017 CU31: September 10, 2024
None None...
Security Bulletin: IBM Automation Decision Services for August 2024 - Multiple CVEs addressed
Summary IBM Automation Decision Services is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2024-5321...
PT-2024-6273 · Microsoft · Windows Storage +1
Name of the Vulnerable Software and Affected Versions: Windows Storage affected versions not specified Description: The issue is related to the use of memory after it has been freed in the Windows Storage Services, which can allow an attacker to elevate their privileges. This is an...
Hotfix XS82ECU1076 - For Citrix Hypervisor 8.2 Cumulative Update 1
Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1. Note: This hotfix is available only to customers on the Customer Success Services program. Information About this Hotfix Prerequisite| XS82ECU1040 ---|--- Post-update tasks| Restart...
Siemens Mendix Runtime
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-8190
An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability. Recent assessments: Assessed Attacker...
Cisco Identity Services Engine REST API Blind SQLi (cisco-sa-ise-rest-5bPKrNtZ)
According to its self-reported version, Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities is affected by a Blind SQL Injection SQLi vulnerability. - Multiple vulnerabilities in the REST API of Cisco Identity Services Engine ISE could allow an authenticated, remote attack...
PT-2024-6304
The vulnerable software is Ivanti Cloud Services Appliance, specifically versions 4.6 Patch 518 and earlier. An OS command injection vulnerability in these versions allows a remote authenticated attacker to obtain remote code execution, but the attacker must have admin level privileges to exploit...
PT-2024-30551 · Phoenix Contact · Fl Mguard 2102 +46
Name of the Vulnerable Software and Affected Versions: Firewall services affected versions not specified Description: A low-privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FW NAT.IN IP environment variable, whic...