Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from an exception mishandling of invalid inputs by an API endpoint, which allows an attacker to generate an error message containing sensitive information about the...

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from a lack of authorization checking on certain API endpoints, which could allow a remote attacker to manipulate the parameter userid via the API request URL to...

PT-2024-34699 · Wave · Wave

Name of the Vulnerable Software and Affected Versions: Wave version 2.0 Description: The issue arises from insufficient encryption of sensitive data received at the API response, allowing an authenticated remote attacker to exploit it by manipulating API input parameters. This could lead to...

CVE-2024-51399

Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft...

CVE-2024-51399

Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft...

CVE-2024-51398

Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background may lead to unauthorized access, data theft, and network attacks, seriously threatening network security...

GIGA WIFI Wave KM08-708H 安全漏洞

GIGA WIFI Wave KM08-708H is a wireless device from GIGA WIFI Wave. A security vulnerability exists in the GIGA WIFI Wave KM08-708H v1.1, which originates from a buffer overflow when the strcpy function is executed without checking the length of the string...

Qualys Ranked as a “Strong Performer” Among Top Vendors in Forrester Wave™ for Attack Surface Management

As the threat landscape evolves and presents new risks to security teams, the bar for attack surface management solutions is higher than ever. When Qualys introduced CyberSecurity Asset Management in 2021, the goal was to provide a unified view of the entire attack surface with visibility into...

Update 22.16 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.16.64731, Platform Build 22.0.64727)

None None...

Update 24.4 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.4.22925, Platform Build 24.0.22865)

None None...

There is a file uploading vulnerability in Jiangsu Wave Information Consulting Company Limited's state-owned capital supervision informatization platform

Jiangsu Wave Information Consulting Co., Ltd. is an ERP senior industry consultants, deep technical background and industry experience, innovation, "integrity management, adhering to the advanced, deep technology" as the goal of the IT company. Jiangsu Wave Information Consulting Co., Ltd...

Akamai Named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2024

...

MAL-2024-12368 Malicious code in wave-opensdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dbda9bf70afa0311dbd7b22b5209531b90399bcc4a5cd5846d3f5fa89314f47 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in wave-opensdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dbda9bf70afa0311dbd7b22b5209531b90399bcc4a5cd5846d3f5fa89314f47 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

fluoriclogppka (>=0.1.0 <=0.2.7), h2o-wave-ml (>=0.3.0 <=0.5.0) +3 more potentially affected by CVE-2024-5979 via h2o (>=3.18.0.8 <=3.44.0.3)

h2o PYPI version =3.18.0.8, =0.1.0, =0.3.0, =0.4.5, =0.0.1, =0.0.102 - tsanalysis =0.1.0 Source cves: CVE-2024-5979 Source advisory: OSV:GHSA-58M3-RCVP-F9WW...

Hanwha Vision IP Cameras Command Injection (CVE-2023-5747)

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...

Malicious code in awesome-print_carrier_wave_uploader (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Update 23.7 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.7.18957, Platform Build 23.0.18933)

None None...

Update 22.13 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.13.64344, Platform Build 22.0.64336)

None None...

h2o-wave-ml (>=0.3.0 <=0.5.0), insolver (>=0.4.5 <=0.4.15a1) +2 more potentially affected by CVE-2024-5550 via h2o (>=3.18.0.8 <=3.32.0.3)

h2o PYPI version =3.18.0.8, =0.3.0, =0.4.5, =0.0.1, =0.0.102 - tsanalysis =0.1.0 Source cves: CVE-2024-5550 Source advisory: OSV:GHSA-X234-R5FG-X52M...