EQ Enterprise Management System 安全漏洞

EQ Enterprise Management System is an enterprise management system from China-based EQ. A security vulnerability exists in EQ Enterprise Management System version v2.0.0. An attacker performs directory traversal via a crafted request...

TOTOLINK AC1200 安全漏洞

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from a buffer overflow vulnerability that can be exploited by an attacker to submit a special request that can crash the service program or execute arbitrary code...

Apollo 安全漏洞

Apollo is an Apollo open source configuration management system. A security vulnerability exists in Apollo version 2.2.0 that originates from a remote attacker who can obtain sensitive information via a specially crafted request...

CVE-2024-42662

An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request...

Schneider Electric Accutech Manager 安全漏洞

Schneider Electric Accutech Manager is a platform that provides field device and base radio performance data in an easy-to-use interface from Schneider Electric, France. A security vulnerability exists in Schneider Electric Accutech Manager version 2.8.0.0 and prior versions, which stems from a...

CVE-2024-42662

CVE-2024-42662 affects apollocongif apollo version 2.2.0. The issue allows a remote attacker to obtain sensitive information via a crafted request, impacting confidentiality (per CVSS 3.1: High, Network, no user interaction). Concrete root cause, affected files, or patched versions are not detail...

CVE-2024-42986

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42947

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2024-42967

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh...

CVE-2024-42966

The CVE-2024-42966 issue affects TOTOLINK N350RT (V9.3.5u.6139_B20201216). The root cause is incorrect access control on /cgi-bin/ExportSettings.sh, enabling retrieval of the apmib configuration file that stores credentials (username/password). The vulnerability impact is described as high confid...

CVE-2024-42966

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh...

CVE-2024-42967

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh...

CVE-2024-42976

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42966

Incorrect access control in TOTOLINK N350RT V9.3.5u.6139B20201216 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh...

httpd: NULL pointer dereference in mod_proxy

A flaw was found in the modproxy module of httpd. A NULL pointer dereference can be triggered when processing a specially crafted HTTP request, causing the httpd server to crash, and resulting in a denial of service...

httpd: NULL pointer dereference in mod_proxy

A flaw was found in the modproxy module of httpd. A NULL pointer dereference can be triggered when processing a specially crafted HTTP request, causing the httpd server to crash, and resulting in a denial of service...

CVE-2024-42001

An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a specially crafted direct request when another user has an active...

CVE-2024-3659

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router...

CVE-2024-6873

It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time o...

CVE-2024-39607

OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the affected product by a logged-in user with an administrative privilege to execute an arbitrary OS command...