CVE-2022-43654 NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability

NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30S routers. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

CVE-2022-43654

Summary: CVE-2022-43654 affects NETGEAR CAX30S routers via a pre-auth RCE caused by improper validation of a user-supplied string in the token parameter passed to the sso.php endpoint, allowing a network-adjacent attacker to execute code as root. The issue is described as a command injection vuln...

CVE-2022-43654 NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability

NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30S routers. Authentication is not required to exploit this vulnerability. The specific flaw exists with...

CVE-2022-43653 Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicio...

CVE-2022-43651

Bentley View SKP File Parsing Use-After-Free allows code execution via crafted SKP files. Root cause: failure to validate existence of an object before operations during SKP parsing, enabling an attacker to run code in the current process. Exploitation requires user interaction (visit a malicious...

CVE-2022-43651 Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2022-43651 Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

CVE-2022-0369 Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability

Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploi...

CVE-2022-0369 Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability

Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploi...

CVE-2022-0369

CVE-2022-0369 affects Triangle MicroWorks SCADA Data Gateway. The flaw is in the Restore Workspace feature where user-supplied paths are not properly validated, enabling a remote attacker to execute code with SYSTEM privileges and bypass authentication. Documented as a directory traversal RCE vul...

CVE-2021-35002 BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability

BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of...

CVE-2021-35002 BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability

BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of...

CVE-2021-35002

CVE-2021-35002 (BMC Track-It!) involves an unvalidated processing path for email attachments in Track-It!, enabling an attacker to upload arbitrary files and execute code in the service account context. Affected software is BMC Track-It! (Track-It! helpdesk/asset management product). The root cau...

CVE-2021-35001

CVE-2021-35001 affects BMC Track-It! GetData endpoint. The root cause is missing authorization prior to accessing functionality, allowing remote disclosure of sensitive information (stored credentials) on affected installations. Exploitation requires authentication per descriptions, and no explic...

CVE-2021-35001 BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2021-35000 OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the targ...

CVE-2021-35000 OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the targ...

CVE-2021-35000

OpenBSD Kernel multicast routing contains an uninitialized memory access flaw that leads to local information disclosure. The vulnerability exists in the multicast routing implementation and allows a local attacker who can execute low-privilege code to obtain sensitive kernel memory contents. The...

CVE-2021-34983 NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit...

CVE-2021-34983

NETGEAR multiple routers are affected by a pre-authentication httpd limitation that allows network-adjacent attackers to disclose sensitive information and potentially stored credentials. Root cause: lack of authentication before access to system configuration via the httpd service (port 80). The...