1450 matches found
CVE-2024-45789: Improper Validation of Integrity Check Value
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacker could exploit this vulnerability by manipulating parameter in the API request body on the...
CVE-2024-8705: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affected by this issue is the function GetDataKindByType of the file /DataSrvs/UCCGSrv.asmx. The manipulation leads to sql injection. The attac...
CVE-2024-45788: Improper Control of Interaction Frequency
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints which could lead to the OTP...
Reedos aiM-Star 安全漏洞
Reedos aiM-Star is a software product from Reedos for mutual fund distribution. A security vulnerability exists in Reedos aiM-Star version 2.0.1, which stems from a lack of rate limiting for OTP requests in certain API endpoints, which could allow an attacker to send multiple OTP requests through...
PT-2024-39185 · Unknown · Shandong Star Measurement/Control Equipment Heating Network Wireless Monitoring System
Name of the Vulnerable Software and Affected Versions: Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System version 5.6.2 Description: A critical issue was found in the system, affecting the GetDataKindByType function of the file /DataSrvs/UCCGSrv.asmx. This...
Reedos aiM-Star 安全漏洞
Reedos aiM-Star is a software product from Reedos for mutual fund distribution. A security vulnerability exists in Reedos aiM-Star version 2.0.1, which stems from the lack of a restriction on excessive failed authentication attempts for API-based logins, which could lead to unauthorized access an...
Reedos aiM-Star 安全漏洞
Reedos aiM-Star is a software product from Reedos for mutual fund distribution. A security vulnerability exists in Reedos aiM-Star version 2.0.1 that stems from improper access control to certain API endpoints, which allows an attacker to manipulate parameters to access sensitive information via ...
Reedos aiM-Star 安全漏洞
Reedos aiM-Star is a software product from Reedos for mutual fund distribution. A security vulnerability exists in Reedos aiM-Star version 2.0.1 that stems from improper validation of the mode parameter in the API endpoint used during the enrollment process, which allows an attacker to bypass...
CVE-2024-45787: Exposure of Private Personal Information to an Unauthorized Actor
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the AP...
CVE-2024-45786: Authorization Bypass Through User-Controlled Key
This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to gain unauthorized access to sensitive...
CVE-2024-36877
Micro-Star International Z-series motherboards Z590, Z490, and Z790 and B-series motherboards B760, B560, B660, and B460 with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's wi...
CVE-2024-36877
Micro-Star International Z-series motherboards Z590, Z490, and Z790 and B-series motherboards B760, B560, B660, and B460 with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's wi...
CVE-2024-36877
Micro-Star International Z-series motherboards Z590, Z490, and Z790 and B-series motherboards B760, B560, B660, and B460 with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's wi...
CVE-2024-36877: Write-what-where Condition
Micro-Star International Z-series motherboards Z590, Z490, and Z790 and B-series motherboards B760, B560, B660, and B460 with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's wi...
CVE-2024-36877
Micro-Star International Z-series (Z590, Z490, Z790) and B-series (B760, B560, B660, B460) motherboards are vulnerable to a write-what-where condition. The flaw exists in the software handler for SMI 0xE3 within specific firmware versions (7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H). Aff...
PT-2024-27186
Name of the Vulnerable Software and Affected Versions Micro-Star International Z-series motherboards versions Z590, Z490, and Z790 Micro-Star International B-series motherboards versions B760, B560, B660, and B460 Micro-Star International motherboards with firmware 7D25v14, 7D25v17 through 7D25v1...
CVE-2024-39626
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rob @ 5 Star Plugins Pretty Simple Popup Builder pretty-simple-popup-builder allows Stored XSS.This issue affects Pretty Simple Popup Builder: from n/a through = 1.0.9...
CVE-2024-39626
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in 5 Star Plugins Pretty Simple Popup Builder allows Stored XSS.This issue affects Pretty Simple Popup Builder: from n/a through 1.0.7...