PT-2024-13350 · Mercusys · Mercusys Mw325R

Name of the Vulnerable Software and Affected Versions: Mercusys MW325R EU V3 version 1.11.0 221019 Description: An issue allows a WAN attacker to make the admin interface unreachable via an unauthenticated HTTP request. The verification of user data does not occur, and the web server remains...

OpenText Dimensions RM 安全漏洞

OpenText Dimensions RM is a full-featured requirements management solution from OpenText Canada. A security vulnerability exists in OpenText Dimensions RM. An authenticated attacker exploiting this vulnerability could escalate their privileges to another user's privileges via an HTTP request...

PT-2024-35094 · Opentext · Opentext Dimensions Rm

Name of the Vulnerable Software and Affected Versions: OpenText Dimensions RM affected versions not specified Description: The issue allows an authenticated user to escalate their privileges to those of another user via an HTTP request. Recommendations: At the moment, there is no information abou...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted HTTP request...

PT-2024-32874 · WordPress · Cost Calculator Builder

Name of the Vulnerable Software and Affected Versions: Cost Calculator Builder Pro plugin for WordPress versions up to 3.1.72 Description: The issue allows authenticated attackers with subscriber-level access and above to make web requests to arbitrary locations originating from the web...

CVE-2024-3286

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request...

CVE-2024-3286

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request...

CVE-2024-3286

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request...

CVE-2024-3286

Summary (CVE-2024-3286): A buffer overflow vulnerability affecting certain Lenovo printers allows an unauthenticated user to trigger a device restart by sending a specially crafted web request. This is reported across multiple sources in the connected documents, including original CVE records and...

PT-2024-24918 · Lenovo · Lenovo Printers

Name of the Vulnerable Software and Affected Versions: Lenovo printers affected versions not specified Description: A buffer overflow issue was identified in some Lenovo printers, allowing an unauthenticated user to trigger a device restart by sending a specially crafted web request...

Lenovo printers 安全漏洞

Lenovo printers is a printer from the Chinese company Lenovo. A security vulnerability exists in Lenovo printer that originates from allowing an unauthenticated user to trigger a device reboot by sending a specially crafted web request...

PT-2024-4723 · Unknown · Сервис Обновлений

Name of the Vulnerable Software and Affected Versions: Сервис обновлений affected versions not specified Description: The issue is related to the web request handler of the "Сервис обновлений" software, which lacks authentication attempt restrictions. This can be exploited by a remote attacker to...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A denial of service vulnerability...

PT-2024-27152 · Proofpoint · Proofpoint Enterprise Protection

Name of the Vulnerable Software and Affected Versions: Proofpoint Enterprise Protection affected versions not specified Description: The issue allows an unauthenticated remote attacker to create additional Encryption user accounts with a specially crafted HTTP request. These accounts can send...

CVE-2023-46012

Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP...

VulnCheck KEV: CVE-2021-21872

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

The vulnerability of the microprogramming software for Mitel series 6800, 6900, 6900w, and 6970 lies in the improper limitation of the path name to the restricted access catalog, allowing unauthorized access to protected information.

The vulnerability of the microprogramming software for Mitel series 6800, 6900, 6900w, and 6970 is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending a special...

D-Link DIR-3040 安全漏洞

The D-Link DIR-3040 is a router from China-based AUO D-Link. It provides the function of connecting to the network. A security vulnerability exists in the D-Link DIR-3040 that stems from a HTTP request processing reference stack based buffer overflow remote code execution vulnerability...

Delta Electronics DIAEnergie 路径遍历漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. A path traversal vulnerability exists in Delta Electronics DIAEnergie, which can be exploited by an attacker to write an arbitrary file on the system by sending a specially crafted URL...

D-Link DIR-3040 安全漏洞

The D-Link DIR-3040 is a router from China-based AUO D-Link. It provides the function of connecting to the network. A security vulnerability exists in the D-Link DIR-3040 that stems from a HTTP request processing reference heap-based buffer overflow remote code execution vulnerability...