1931 matches found
CVE-2024-54751
COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54751: Incorrect Default Permissions
COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-24786 affecting package cf-cli for versions less than 8.7.3-3
CVE-2024-24786 affecting package cf-cli for versions less than 8.7.3-3. A patched version of the package is available...
CVE-2024-38826
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release version to 1.194.0 or...
CVE-2024-38826
CVE-2024-38826 concerns Cloud Foundry Cloud Controller. Authenticated users can upload specially crafted files to leak server resources, enabling a potential denial-of-service against the Cloud Controller. Affected components include Cloud Foundry Capi Release versions before 1.194.0 and cf-deplo...
CVE-2024-38826 CVE-2024-38826 Cloud Controller Denial of Service Attack
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release version to 1.194.0 or...
CVE-2024-38826: Uncontrolled Resource Consumption
Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: Upgrade capi release version to 1.194.0 or...
AZL-52251 CVE-2024-51744 affecting package cf-cli for versions less than 8.4.0-24
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
UBUNTU-CVE-2024-46859
In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...
COMFAST CF-XR11 security vulnerabilities
COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version V2.7.2, which originates from a command injection vulnerability in the function sub424CB4, which allows an attacker to send a POST request message to...
CVE-2024-44466: Improper Neutralization of Special Elements used in a Command
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...
PT-2024-31160
Name of the Vulnerable Software and Affected Versions COMFAST CF-XR11 version 2.7.2 Description The issue is a command injection vulnerability in the function sub 424CB4. Attackers can exploit this by sending POST request messages to the "/usr/bin/webmgnt" API endpoint and injecting commands into...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 is affected by a command-injection vulnerability in function sub_424CB4. An attacker can send POST requests to /usr/bin/webmgnt and inject commands via the iface parameter. The CVE-2024-44466 entries across multiple sources (NVD/Red Hat/CNNVD/etc.) corroborate a high-severi...
PT-2024-7179
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Panasonic laptop code in the Linux kernel, which uses the SINF array with index values without checking its size. This can lead to out-of-bounds accesses,...
USN-6621-1: ImageMagick vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that ImageMagick incorrectly handled certain values when processing BMP files. An attacker could exploit this to cause a denial of service. Update Instructions: Ru...