3967 matches found
Cisco Secure Firewall Management Center 安全漏洞
Cisco Secure Firewall Management Center is a security firewall management software from Cisco. A role privilege check security vulnerability exists in the Cisco Secure Firewall Management Center WEB interface, which can be exploited by a remote attacker to submit a special request that can elevat...
The vulnerability of the application programming interface of the Skipper server on the Spring Cloud Data Flow microservices platform allows a perpetrator to write a file to any directory in the system using a specially crafted API request.
The vulnerability of the application programming interface of the Skipper server in the Spring Cloud Data Flow microservices platform is related to improper code generation management. Exploiting this vulnerability allows an attacker, operating remotely, to write a file to any directory in the...
The vulnerability of the wlanTimerRuleJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.
The vulnerability of the wlanTimerRuleJsonToBin function in TP-Link TL-WDR7660 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially crafted HTTP...
PT-2024-30616 · Elecom · Elecom Wab-I1750-Ps +1
Name of the Vulnerable Software and Affected Versions: ELECOM WAB-I1750-PS version not specified ELECOM WAB-S1167-PS version not specified Description: A stack-based buffer overflow issue exists in ELECOM wireless access points. This issue can be triggered by processing a specially crafted HTTP...
Embedthis Software GoAhead 代码问题漏洞
Embedthis Software GoAhead is an open source, small embedded web server from Embedthis Software. A code issue vulnerability exists in Embedthis Software GoAhead version 6.0.0 and earlier, which stems from the presence of a null pointer dereference vulnerability that could allow a remote attacker ...
D-Link DIR-878和D-Link DIR-882 安全漏洞
The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...
The vulnerability of the distribution and transaction optimization software in the Apache Seata microservice architecture, related to shortcomings in the deserialization mechanism, allows attackers to trigger service failures.
The vulnerability of distribution software and the improvement of transaction performance in the architecture of Apache Seata microservices is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to trigger service failures through a...
CVE-2024-45085
IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service...
CVE-2024-44775
An issue in kmqtt v0.2.7 allows attackers to cause a Denial of ServiceDoS via a crafted request...
PT-2024-31423 · Ibm · Ibm Websphere Application Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server version 8.5 Description: The issue is a denial of service vulnerability that can be triggered by an unexpected specially crafted request under certain configurations. A remote attacker could exploit this to...
IBM WebSphere Application Server 代码问题漏洞
IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A code issue vulnerability exists in IBM WebSphere...
CVE-2024-44775
kmqtt v0.2.7 is vulnerable to Denial of Service DoS due to a Null Pointer Exception. A remote attacker can cause the broker to crash by sending a specially crafted MQTT CONNECT packet that triggers an unhandled null reference, leading to an immediate process termination...
PT-2024-31243 · Kmqtt · Kmqtt
Name of the Vulnerable Software and Affected Versions: kmqtt version 0.2.7 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For kmqtt version 0.2.7, at the moment, there is no information about a newer version that contains a fix for...
CVE-2024-44775
CVE-2024-44775 affects kmqtt v0.2.7. A DoS vulnerability exists via a crafted request. The Red Hat, NVD, CNNVD, CVE listings corroborate the issue; no remediation or patch details are provided in the connected documents. Exploit specifics and affected scope beyond kmqtt v0.2.7 are not detailed he...
KMQTT 安全漏洞
KMQTT is a Kotlin multi-platform MQTT 3.1.1/5.0 client and proxy from the individual developer Davide Pianca. A security vulnerability exists in KMQTT version v0.2.7 that stems from an issue that allows an attacker to cause a denial of service DoS via a crafted request...
CVE-2024-44775
kmqtt v0.2.7 is vulnerable to Denial of Service DoS due to a Null Pointer Exception. A remote attacker can cause the broker to crash by sending a specially crafted MQTT CONNECT packet that triggers an unhandled null reference, leading to an immediate process termination...
Eclipse Jetty 安全漏洞
Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty that originates from the fact that an unauthorized user can trigger a remote denial-of-service attack by sending a carefully constructed...
CVE-2024-44734
Incorrect access control in Mirotalk before commit 9de226 allows attackers to arbitrarily change usernames via sending a crafted roomAction request to the server...
CVE-2024-44734
The CVE-2024-44734 vulnerability affects Mirotalk/MiroTalk prior to commit 9de226. The root cause is improper access control in handling roomAction requests, enabling an attacker to arbitrarily change usernames on the server. This is described consistently across multiple sources (NVD, Red Hat se...