Ruijie Networks NBR3000D-E 安全漏洞

Ruijie Networks NBR3000D-E is a gateway from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks NBR3000D-E that stems from the /tool/shell/postgresql.conf component containing an information disclosure issue...

PT-2024-31189 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys conf function. This allows for potential exploitation. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys...

Malware in eslint-module-conf

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-8845 Malicious code in eslint-module-conf (npm)

The package contains the BeaverTail infostealer malware associate with DPRK threat actors. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ba9b08d4ba893169691f9b674d05dc209e43e0932a266fbac6479a5e1dc398 Any computer that has this package installed or running should...

Malicious code in eslint-module-conf (npm)

The package contains the BeaverTail infostealer malware associate with DPRK threat actors. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ba9b08d4ba893169691f9b674d05dc209e43e0932a266fbac6479a5e1dc398 Any computer that has this package installed or running should...

CVE-2022-48910

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be called with NETDEVDOWN: either the network device is actually going down, or IPv6 was disabled on the interface. If either of them...

PT-2024-28381 · Shenzhen Libituo Technology Co. · Lbt-T300-T400

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 contains a buffer overflow via the ApCliSsid parameter in the generate conf router function. This issue...

CVE-2024-36997: Improper Neutralization of Input During Web Page Generation

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a...

Malicious code in web-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3937 Malicious code in web-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in spectator-conf (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3038 Malicious code in spectator-conf (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-32227

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, specifically the wifi: iwlwifi: mvm module. The lookup function iwl mvm rcu fw link id to link conf is normally called with input from the firmware a...

Rocky Linux 8 : pcp (RLSA-2024:3264)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3264 advisory. pcp: exposure of the redis server backend allows remote command execution via pmproxy CVE-2024-3019 Tenable has extracted the preceding description block directl...

PT-2024-20313 · Robdns · Robdns

Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: The issue is related to a NULL pointer dereference via the item-tokens component at /src/conf-parse.c. This occurs in robdns commit d76d2e6. Recommendations: For version d76d2e6, consider applying a patch t...

CVE-2024-24194: NULL Pointer Dereference

robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item-tokens component at /src/conf-parse.c...

CVE-2024-20389

A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement whe...

PYSEC-2024-175

WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...

Important: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-3740

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9. This issue affects the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated remotely. The exploit has...