CVE-2024-37023

CVE-2024-37023 affects Vonets Industrial WiFi Bridge Relays/Repeaters (e.g., VAR1200-H/L, VAR600-H, VAP11AC/11G/11S variants, VBG1200, VGA-1000, etc.) with software version 3.3.23.6.9 and prior. It is a command-injection vulnerability that enables an authenticated remote attacker to execute arbit...

CVE-2024-37023 Vonets WiFi Bridges Command Injection

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parameters...

CVE-2024-41936 Vonets WiFi Bridges Path Traversal

A directory traversal vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to read arbitrary files and bypass authentication...

CVE-2024-29082 Vonets WiFi Bridges Improper Access Control

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints...

PT-2024-18882 · Qualcomm · Snapdragon +170

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure when handling beacon or probe response frames in a Station STA. No details are provided about the estimated...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

PT-2024-28611 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to an access control vulnerability in the security verification module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-6325

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html by...

PT-2024-35451 · Unknown · Wp-Affiliate-Platform

Name of the Vulnerable Software and Affected Versions: wp-affiliate-platform versions prior to 6.5.1 Description: The issue concerns a lack of CSRF check and missing sanitization as well as escaping in certain areas, potentially allowing attackers to execute an XSS payload via a CSRF attack on...

PT-2024-40100 · Pypi · Cipherbcrypt

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves a malicious package that exfiltrates secrets to a target server. No further details are provided about the nature of the issue or its potential impact. Recommendation...

PT-2024-16444 · Google · Google Quickshare

Name of the Vulnerable Software and Affected Versions: Google Quick Share Windows versions prior to 1.0.2002.2 Google Quick Share commit prior to 5d8b9156e0c339d82d3dab0849187e8819ad92c0 Description: An authentication bypass exists in Google Quick Share, allowing an attacker to upload an unknown...

Realtek AP-Router SDK Security Vulnerability

Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek, a Chinese company. A security vulnerability exists in the Realtek AP-Router SDK that originates from a stack-based buffer overflow vulnerability in the boa setRepeaterSsid function, which can lea...

CVE-2024-6050

Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects SOWA OPAC...

Multiple TIBCO Software Products Security Vulnerabilities

TIBCO Software Spotfire Server and TIBCO Software Spotfire Analyst are both products of TIBCO Software, Inc. of the U.S.A. TIBCO Software Spotfire Server is a suite of data analysis and mining tools based on TIBCO Spotfire that provide integration and management for organizations. TIBCO Software...

CVE-2024-5961 Reflected XSS in 2ClickPortal

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software...

PT-2024-27037 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is an out-of-bounds read vulnerability located in the audio module. Successful exploitation of this vulnerability will affect availability...

CVE-2023-35040 WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6...

CVE-2024-30529 WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through = 0.20.7...

PT-2024-26861 · Qt Company +2 · Qt +2

Name of the Vulnerable Software and Affected Versions: Qt versions prior to 5.15.17 Qt versions 6.x prior to 6.2.13 Qt versions 6.3.x through 6.5.x prior to 6.5.6 Qt versions 6.6.x through 6.7.x prior to 6.7.1 Description: The issue concerns QAbstractOAuth in Qt Network Authorization, where it us...

CVE-2024-33608 BIG-IP IPsec vulnerability

When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...