CVE-2023-22601

CVE-2023-22601 affects InHand Networks InRouter302 (pre V3.5.56) and InRouter615 (pre InRouter6XX-S-V2.3.0.r5542). It is CWE-330: Use of Insufficiently Random Values due to improper randomization of MQTT ClientID parameters, enabling an unauthorized user to gather information about other devices ...

CVE-2023-22601: Use of Insufficiently Random Values

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values. They do not properly randomize MQTT ClientID parameters. An unauthorized user could calculate this...

AMD System Management Unit (SMU) buffer error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit SMU that stems from inadequate boundary checking and could allow an attacker to update SRAM from/to address space to an invalid value,...

Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system and JunOS Evolved is related to the improper handling of indeterminate values. Exploiting this vulnerability can allow a malicious actor to cause service failures when sending certain BGP updates...

EulerOS Virtualization 2.9.1 : python-pip (EulerOS-SA-2023-1201)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, whic...

CVE-2022-4368

The WP CSV WordPress plugin through 1.8.0.0 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, and doe snot have CSRF checks in place as well, leading to a Reflected Cross-Site Scripting...

EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-1124)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amoun...

UBUNTU-CVE-2022-45143

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...

CVE-2022-4663

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...

PT-2023-13553 · Unknown · Wecube Platform

Name of the Vulnerable Software and Affected Versions: WeCube Platform version 3.2.2 Description: An issue was discovered in WeCube Platform, where multiple CSV injection issues exist. The affected pages include the Home / Admin / Resources page, the Home / Admin / System Params page, and the Hom...

WeCube security vulnerabilities

WeCube is a set of open source , one-stop It architecture management and operation and maintenance management tools . Used to simplify the distributed architecture It management , and can be extended through plug-ins . A security vulnerability exists in WeCube Platform version 3.2.2, which stems...

sememos/memos vulnerable to Improper Handling of Values

In usememos/memos 0.9.0 and prior, an attacker can post malicious content to another user's memos page via POST request...

Input validation

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851: Improper Handling of Values

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

Golf may allow attacker to bypass CSRF protections due to weak PRNG

CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests...

Huawei ManageOne CSV Injection Code Execution

The vulnerability of Huawei ManageOne, iManager NetEco, and iManager NetEco 6000 management systems lies in the absence of neutralization of certain elements in the CSV file. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

CVE-2019-25089

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...

Design/Logic Flaw

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version...