PT-2024-8975 · Cisco · Managed C-Series +2

Name of the Vulnerable Software and Affected Versions: Cisco UCS B-Series, Managed C-Series, and X-Series Servers affected versions not specified Description: The issue is related to insufficient input validation in the Redfish API, allowing an authenticated, remote attacker with administrative...

Cisco UCS B-Series Blade Servers、Cisco UCS Managed C-Series Rack Servers和Cisco UCS X-Series Modular System 安全漏洞

Cisco UCS B-Series Blade Servers and others are products of Cisco, Inc.The Cisco UCS B-Series Blade Servers are a UCS B-Series blade server appliance.The Cisco UCS Managed C-Series Rack Servers are a standard form factor server designed to fit in a rack to save space in the data center.The Cisco...

CVE-2024-9316 code-projects Blood Bank Management System B+.php sql injection

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The...

Hewlett Packard Enterprise HP-UX System 安全漏洞

Hewlett Packard Enterprise HP-UX System HPE HP-UX System is a powerful UNIX operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise HP-UX System versions prior to B.11.31.24 that stems from the presence of a denial of service vulnerabili...

CVE-2024-44993

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in v3dcsdjobrun When enabling UBSAN on Raspberry Pi 5, we get the following warning: 387.894977 UBSAN: array-index-out-of-bounds in drivers/gpu/drm/v3d/v3dsched.c:320:3 387.903868 index 7 is out of...

Backdoor.Win32.Optix.02.b MVID-2024-0690 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/706ddc06ebbdde43e4e97de4d5af3b19.txt Contact: [email protected] Media: x.com/malvuln Threat: Backdoor.Win32.Optix.02.b Vulnerability: Weak Hardcoded Credentials Description: Optix listens o...

PT-2024-25089 · [Vendor] · Vendor B Products

Name of the Vulnerable Software and Affected Versions: Vendor B products affected versions not specified Description: Memory corruption occurs when the captureRead QDCM command is invoked from user-space. This issue can be exploited, leading to memory corruption. Remediation steps are available i...

CVE-2024-5623

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5622

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5624

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624

CVE-2024-5624 is a reflected XSS vulnerability in the Shift Logbook component of B&R APROL, affecting versions up to R 4.4-00P3. The issue is caused by a cross-site scripting flaw in the Shift Logbook application that could allow a network-based attacker to execute arbitrary JavaScript in the use...

CVE-2024-5623 Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5623 Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5623

CVE-2024-5623 affects B&R APROL up to R 4.4-00P3. The vulnerability is an untrusted search path that could allow an authenticated local attacker to cause other users to execute arbitrary code with the attacker’s privileges. Documents confirm the affected software and the root cause, but do not pr...

CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5622

The CVE-2024-5622 entry concerns B&R APROL (AprolConfigureCCServices). Multiple sources corroborate an untrusted search path vulnerability that could allow an authenticated local attacker to execute arbitrary code with elevated privileges. Affected are APROL versions R 4.2.-07P3 and R 4.4-00P3 or...

CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

VulnCheck KEV: CVE-2020-10215

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dnsqueryname parameter in a dnsquery.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected...