3967 matches found
CVE-2024-22353
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400...
CVE-2024-22353
CVE-2024-22353 affects IBM WebSphere Liberty (and related base images) versions 17.0.0.3 through 24.0.0.4, vulnerable to denial of service caused by a specially crafted request that can exhaust server memory. IBM entries describe remediation by applying fixes/upgrades (e.g., IBM Liberty 23.0.18 o...
IBM WebSphere Application Server Liberty 资源管理错误漏洞
IBM WebSphere Application Server Liberty is a Java application server from International Business Machines IBM built on top of the Open Liberty project. A resource management error vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 24.0.0.3, which stems fro...
PT-2024-22774 · Svr-116 · Svr-116
Name of the Vulnerable Software and Affected Versions: SVR-116 firmware version 1.6.0.30028871 Description: The issue allows a remote authenticated attacker with administrative privileges to execute arbitrary OS commands by sending a specially crafted request to the product. Recommendations: For...
Rockwell Automation Arena Simulation Software Arbitrary Code Execution Vulnerability
Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. An arbitrary code execution vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by an attacker t...
The vulnerability of the phpMyFAQ web application lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the phpMyFAQ web application is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...
CVE-2024-2915
Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to elevate themselves to unauthorized groups via a specially crafted request...
CVE-2024-28441
File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint...
Apache Commons Configuration 缓冲区错误漏洞
Apache Commons Configuration is the United States Apache Apache Foundation , a common configuration interface , it is mainly used to enable Java applications to read configuration data from a variety of sources . An out-of-bounds write vulnerability exists in Apache Commons Configuration versions...
CVE-2024-28735
Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerability which allows an authenticated user to modify the password of any user of the application via a crafted request...
Cisco IP Phones 7800 and 8800 Series Web Management Interface Authentication Bypass (CVE-2023-20018)
A vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series Phones could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploi...
OpenText Vertica Management Security Vulnerability
OpenText Vertica Management is a data management solution from OpenText for managing and optimizing enterprise data warehouses. A security vulnerability exists in OpenText Vertica Management that stems from the ease of bypassing via a carefully crafted request...
The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.
The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root user privileges...
The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.
The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a...
Path traversal
Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue...
Apache DolphinScheduler Security Bypass Vulnerability
Apache Dolphinscheduler is a modern data scheduling platform from the Apache USA Foundation. The Apache DolphinScheduler security bypass vulnerability, which stems from a session not being logged off after a password change, can be exploited by an attacker to bypass access restrictions by sending...
Fortinet FortiManager 访问控制错误漏洞
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...
CVE-2023-6444
Seriously Simple Podcasting WordPress plugin versions prior to 3.0.0 disclose the Podcast owner's email via an unauthenticated crafted request. Impact: unauthorized disclosure of administrator email addresses; remediation: upgrade to version 3.0.0 or later.
raspap-webgui vulnerable to denial of service
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...