1553 matches found
(Pwn2Own) QNAP TS-464 Cloud Utility Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of password reset requests. The issue results from the la...
(Pwn2Own) QNAP TS-464 TURN Server create_session Server-Side Request Forgery Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the createsession action. The issue results from the lack of...
(Pwn2Own) QNAP TS-464 Improper Validation Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication logic. The issue results from improper validation of the...
(Pwn2Own) QNAP TS-464 username Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the...
CVE-2024-6188: Direct Request
A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...
The vulnerability of the QNAP TS-X41 network storage device lies in the lack of protection for operational data, which allows a hacker to identify existing users within the system.
The vulnerability of the QNAP TS-X41 network storage device is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to identify existing users within the system...
(Pwn2Own) QNAP TS-464 HLS_tmp Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HLStmp parameter provided to the share.cgi endpoint. The iss...
(Pwn2Own) QNAP TS-464 Authentication Service Improper Certificate Validation Vulnerability
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication functionality, which...
(Pwn2Own) QNAP TS-464 File Upload Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of file uploads. The issue results from the lack of proper...
(Pwn2Own) QNAP TS-464 Exposed Dangerous Method Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privWizard.cgi endpoint. The issue results from an exposed dangerous method. An...
(Pwn2Own) QNAP TS-464 authLogin SQL Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP TS-464 NAS devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the authLogin...
(Pwn2Own) QNAP TS-464 QR Code Device CRLF Injection Arbitrary Configuration Change Vulnerability
This vulnerability allows remote attackers to make arbitrary changes to configuration on affected installations of QNAP TS-464 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privWizard API endpoints. The issue results from the lack o...
(Pwn2Own) QNAP TS-464 Netmgr Endpoint CRLF Injection Arbitrary Configuration Update Vulnerability
This vulnerability allows remote attackers to create arbitrary configurations on affected installations of QNAP TS-464 NAS devices. An attacker must first obtain the ability to access the device's localhost interface, which can be accomplished using a malicious TURN server. The specific flaw exis...
GHSA-952P-6RRQ-RCJV vulnerabilities
Vulnerabilities for packages: semaphore, kubeflow-katib, arangodb, py3-captum, ts-patch, gitlab-rails-ce-fips, opensearch-dashboards, renovate, argo-workflows, opensearch-dashboards-fips, kibana, lerna, gitlab-rails-ce, kubeflow-pipelines...
CVE-2024-4067 vulnerabilities
Vulnerabilities for packages: semaphore, kubeflow-katib, arangodb, py3-captum, ts-patch, gitlab-rails-ce-fips, opensearch-dashboards, renovate, argo-workflows, opensearch-dashboards-fips, kibana, lerna, gitlab-rails-ce, kubeflow-pipelines...
CVE-2024-34050
Open Networking Foundation SD-RAN Rimedo rimedo-ts version 0.1.1 is vulnerable to a slice bounds out-of-range panic within the reader.go file. The root cause is an improper validation of array indices when executing the operation return uint64(b[2])<<16 | uint64(b[1])<
PT-2024-25668 · Open Networking Foundation · Rimedo-Ts
Name of the Vulnerable Software and Affected Versions: Open Networking Foundation SD-RAN Rimedo rimedo-ts version 0.1.1 Description: The issue is related to a slice bounds out-of-range panic in the code. Specifically, the problem occurs in the line "return uint64b216 | uint64b18 | uint64b0" in th...
CVE-2024-34049
The Open Networking Foundation SD-RAN Rimedo rimedo-ts version 0.1.1 is vulnerable to a Denial of Service (DoS) condition caused by a slice bounds out-of-range panic . The root cause is identified as inadequate bounds checking within the reader.go file, specifically in the line return plmnIdStrin...
