528 matches found
CVE-2024-33377
LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...
CVE-2024-33375
LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware...
CVE-2024-33374
Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...
CVE-2024-33375
CVE-2024-33375 affects LB-LINK BL-W1210M v2.0, where credentials are stored in plaintext inside the router firmware. The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no privileges, and no user interaction required. The issue originates from unencrypted storage of credentials in the ...
CVE-2024-33373
An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. This vulnerability can allow attackers to access the router via a brute-force attack...
CVE-2024-35592
An arbitrary file upload vulnerability in the Upload function of Box-IM v2.0 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35592
An arbitrary file upload vulnerability in the Upload function of Box-IM v2.0 allows attackers to execute arbitrary code via uploading a crafted PDF file...
GHSA-87MP-XC4X-X8RH asymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA Encryption
The encryption and decryption process were vulnerable against the Bleichenbacher's attack, which is a padding oracle vulnerability disclosed in the 98'. The issue was about the wrong padding utilized, which allowed to retrieve the encrypted content. The OPENSSLPKCS1PADDING version, aka PKCS v1.5...
CVE-2024-33429
Buffer-Overflow vulnerability at pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file...
CVE-2024-33430
An issue in phiola/src/afilter/pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33429
CVE-2024-33429 affects phiola v2.0-rc22. The vulnerability is a buffer overflow at pcm_convert.h:513, enabling a remote attacker to execute arbitrary code via a crafted .wav file. Public sources (NVD/Red Hat/CNNVD/CVE listings) confirm the affected software and issue details; exploitation status ...
CVE-2024-33430
An issue in phiola/src/afilter/pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33430
CVE-2024-33430 affects phiola v2.0-rc22, with a flaw in phiola/src/afilter/pcm_convert.h at line 513 that lets a remote attacker execute arbitrary code via a crafted .wav file. The connected sources consistently describe remote code execution potential and indicate the issue resides in the WAV ha...
CVE-2024-33431
An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file...
CVE-2024-33431
The CVE-2024-33431 issue affects phiola v2.0-rc22, where a flaw in phiola/src/afilter/conv.c:115 can be triggered by processing a crafted WAV file, enabling a remote attacker to cause a denial of service. Multiple connected sources (Red Hat, CVE lists, CNNVD, PT Security) corroborate the same des...
CVE-2024-33430
An issue in phiola/src/afilter/pcmconvert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file...
CVE-2024-33431
An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file...
CVE-2024-29368
CVE-2024-29368 affects moziloCMS v2.0, targeting the file handling module. The vulnerability enables an attacker to bypass extension restrictions by renaming uploaded files, potentially allowing arbitrary code execution or storage of malicious content. Public documentation from multiple sources c...
Achieving NIST CSF 2.0 Top Tier Adaptable Status
An Overview of NIST CSF 2.0 The National Institute of Standards and Technology NIST recently updated its popular Cybersecurity Framework CSF to version 2.0 to help organizations reduce cybersecurity risks. Designed for virtually all industry sectors, from small to medium businesses SMBs to larger...