3148 matches found
CVE-2023-29159
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette...
Starlette 路径遍历漏洞
Starlette is Encode open source a lightweight ASGI framework/toolkit . Ideal for building asynchronous web services with Python . A security vulnerability exists in Encode Starlette versions prior to 0.27.0, which stems from a directory traversal vulnerability that could allow a remote attacker t...
JVN#95981715: Starlette vulnerable to directory traversal
Starlette provided by Encode contains a directory traversal vulnerability CWE-22. Impact Under certain conditions, a remote attacker may view files in a web service which was built using the product. Solution Update the software Update the software according to the information provided by the...
PT-2023-24306 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: IceCMS version 1.0.0 Description: The issue is related to Insecure Permissions, allowing unauthorized access to the API. This results in the disclosure of sensitive information. Recommendations: For IceCMS version 1.0.0, consider restricting...
PT-2023-23559 · Hanwha · Hanwha Ip Camera Ane-L7012R +1
Name of the Vulnerable Software and Affected Versions: Hanwha IP Camera ANE-L7012R version 1.41.01 Hanwha IP Camera XNV-9082R version 2.10.02 Description: The issue is related to a Denial of Service DoS condition. It occurs when an empty UDP packet is sent to the listening service, causing the...
Delta Industrial Automation DIALink Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of Delta Industrial Automation DIALink. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the opcu...
Siemens SIPROTEC 5 Devices Null Pointer Dereference (CVE-2023-28766)
A vulnerability has been identified in SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V9.40, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V9.40, SIPROTEC 5 6MD89 CP300 All versions, SIPROTEC 5 6MU85 CP300 All versions V9.40, SIPROTEC 5 7KE85...
Oracle Java SE and JRockit Unspecified Vulnerability
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions JMX. This vulnerability can be exploited through sandboxed Java Web Start applications and sandbox...
PT-2023-22454 · Medical Systems Co. · Medisys Weblab Products
Name of the Vulnerable Software and Affected Versions: Medical Systems Co. Medisys Weblab Products version 19.4.03 Description: The issue is a SQL injection vulnerability that can be exploited via the tem:statement parameter in the WSDL files. This allows for potential unauthorized access to...
The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to disclose sensitive information and also cause service failures.
The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as cause service failures...
Metasploit Weekly Wrap-Up
Scanner That Pulls Sensitive Information From Joomla Installations This week's Metasploit release includes a module for CVE-2023-23752 by h00die. Did you know about the improper API access vulnerability in Joomla installations, specifically Joomla versions between 4.0.0 and 4.2.7, inclusive? This...
CVE-2023-2379
A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2023-2379
A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
Design/Logic Flaw
A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2023-2379 Ubiquiti EdgeRouter X Web Service denial of service
A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2023-2379
CVE-2023-2379 affects Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The Web Service component is vulnerable to remote denial of service; manipulation leads to DoS. The exploit has been disclosed publicly and may be used. Remediation: upgrade to a version later than 2.0.9-hotfix.6 as advised by PT-2...
CVE-2023-2379 Ubiquiti EdgeRouter X Web Service denial of service
A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
PT-2023-19204 · Ubiquiti · Edgerouter X
Name of the Vulnerable Software and Affected Versions: Ubiquiti EdgeRouter X versions up to 2.0.9-hotfix.6 Description: A critical issue has been found in the Web Service component, allowing for denial of service through remote attack. The exploit has been disclosed publicly. Recommendations: For...