16552 matches found
Multiple vulnerabilities in SHARP routers
Overview SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 - CVE-2024-45721 The hidden debug function is enabled CWE-489 - CVE-2024-46873 Buffer overflow vulnerability in the hidden debug function CWE-120 -...
PT-2024-26395
Name of the Vulnerable Software and Affected Versions GeoServer versions prior to 2.26.0 Description GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. In affected versions, the welcome and about page includes version and revision...
MAL-2024-11869 Malicious code in questdb-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292ba477ee3d52c63d6ed6f224aac50507b0f816c20c525c36dc99f37f411eba The OpenSSF Package Analysis project identified 'questdb-console' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...
Malicious code in questdb-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292ba477ee3d52c63d6ed6f224aac50507b0f816c20c525c36dc99f37f411eba The OpenSSF Package Analysis project identified 'questdb-console' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...
Security Bulletin: Vulnerability in linux-firmware (CVE-2023-31346) affects Power HMC.
Summary The linux-firmware library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-31346 DESCRIPTION: AMD SEV-SNP Firmware could allow a local authenticated attacker to obtain sensitive information, caused by the failure...
Security Bulletin: Vulnerability in openssh (CVE-2020-15778) affects Power HMC.
Summary The openssh library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2020-15778 DESCRIPTION: OpenSSH could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation in the...
Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-38709) affects Power HMC.
Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-38709 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by improper input validation in the...
Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-45802) affects Power HMC.
Summary The Apache HTTP Server library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-45802 DESCRIPTION: When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources...
MAL-2024-11838 Malicious code in openai-realtime-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in openai-realtime-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OESA-2024-2561 iptraf-ng security update
IPTraf is a console-based network monitoring program for Linux that displays information about IP traffic. It returns such information as: Security Fixes: VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZCVE-2024-52949...
SUSE CVE-2024-6538
A flaw was found in OpenShift Console. A Server Side Request Forgery SSRF attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to...
Ivanti Cloud Services Appliance Web Console Administrative Access
The vulnerability of the web console of the Ivanti Cloud Services Appliance, which is used for automating IT service management processes, relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating...
Ivanti Cloud Services Appliance Code Execution
The vulnerability of the web console of the Ivanti Cloud Services Appliance, which is used for automating IT service management processes, stems from the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Ivanti Cloud Services Appliance SQL Injection
The vulnerability of the web console of the Ivanti Cloud Services Appliance, which is used for automating IT service management processes, relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL querie...
Veeam Service Provider Console security vulnerabilities
Veeam Service Provider Console is a cloud-enabled platform from Veeam USA. A security vulnerability exists in Veeam Service Provider Console version 8.1 that originates from a remote code execution that can be performed by a management agent machine on a VSPC server machine with server...
Vulnerabilities fixed in Ivanti Cloud Security Appliance
Ivanti has fixed vulnerabilities in the Cloud Security Appliance CSA for versions prior to 5.0.3. The vulnerabilities are located in the admin web console of the Ivanti Cloud Security Appliance. The first vulnerability involves an authentication bypass, allowing remote unauthenticated attackers t...
Oracle Siebel CRM 8.5.x < 16.4 (July 2016 CPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2016 CPU advisory. - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM subcomponent: Information Manager Console. The supported version that is...
PT-2024-41080
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is related to a lack of protection for the SQL query structure in the web console management of a software-hardware complex. This could allow a remote attacker to execute arbitrary S...
