Advantech ADAM-5630 Access Control Error Vulnerability

Advantech ADAM-5630 is an edge intelligent data acquisition controller from Advantech, China. An Access Control Error vulnerability exists in the Advantech ADAM-5630, which can be exploited by an attacker to execute arbitrary commands on the system...

Debian dsa-5778 : cups-browsed - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5778 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5778-1 [email protected] https://www.debian.org/securit...

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2022-2068]

Summary Redhat provided OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2022-2068 Vulnerability Details CVEID:CVE-2022-2068 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary commands on the system, caus...

Remote Code Execution

Promptr is vulnerable to Remote Command Execution RCE. The vulnerability is due to insufficient validation of URLs, allowing attackers to execute arbitrary commands via a crafted URL...

CUPS cups-browsed input validation error vulnerability

CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS cups-browsed, which can be exploited by an attacker to remotely execute arbitrary commands on the target machine when starting a print job...

CVE-2024-47176

CVE-2024-47176 affects CUPS/CUPS-browsed: cups-browsed binds to INADDR_ANY:631 and trusts any packet, enabling an attacker-controlled IPP Get-Printer-Attributes URL to trigger remote commands. Connected Astra Linux advisories describe an exploit chain with CVE-2024-47076, CVE-2024-47175 and CVE-2...

CVE-2024-47177

A security flaw was found in OpenPrinting CUPS. The FoomaticRIPCommandLine directive in a PPD file will allow arbitrary commands to be executed when a print job is sent to the affected printing device. An attacker who could provide a malicious PPD file for a new print device or modify a PPD file ...

CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

CVE-2024-43191

IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request...

CVE-2024-43191

IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request...

CVE-2024-43191 IBM ManageIQ command execution

IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request...

CVE-2024-43191

CVE-2024-43191 affects IBM Cloud Pak for Multicloud Management (CP4MCM) 2.3 to 2.3 FP8. The issue is a remote command execution vulnerability due to weaknesses in deserializing a specially crafted YAML file, exploitable by a remote authenticated attacker. Remediation: upgrade to CP4MCM 2.3 Fix Pa...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

CVE-2022-49039

Affected software: Synology Drive Client (backup task management). The issue is an out-of-bounds write vulnerability in the backup task management functionality prior to version 3.4.0-15721. Exploitation requires local access with administrator privileges and can allow arbitrary command execution...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

CVE-2024-46627

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests...

Synology Drive 安全漏洞

Synology Drive is a collaborative office suite from China-based Synology Inc. The product includes document management, collaborative office and file synchronization and backup features. A security vulnerability exists in Synology Drive before 3.4.0-15721, which stems from an out-of-bounds write...

CVE-2024-46627

DATAGERRY (BECN) v2.2 shows an Incorrect Access Control vulnerability that allows an attacker to execute arbitrary commands via crafted HTTP requests to the REST API. The issue is documented as a REST API authentication bypass/ACL flaw with high impact (CVSS 3.1: 9.1, Critical) and affects the v2...