PT-2024-6800 · Passwork · Passwork

Name of the Vulnerable Software and Affected Versions: Passwork affected versions not specified Description: The issue is related to insufficient validation of incoming requests in the password manager. This can be exploited by a remote attacker to perform a Server-Side Request Forgery SSRF attac...

PT-2024-12110 · Unknown · Cs-Cart Multivendor

Name of the Vulnerable Software and Affected Versions: CS-Cart MultiVendor version 4.16.1 Description: An issue in CS-Cart MultiVendor allows attackers to alter arbitrary user account profiles via crafted post requests. Recommendations: For CS-Cart MultiVendor version 4.16.1, consider disabling...

CVE-2024-36981

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLCv3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this...

CVE-2024-34026

A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker can send a series of EtherNet/IP requests to...

CVE-2024-36980

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLCv3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger this...

CVE-2024-39589

Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLCv3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to...

PT-2024-27229 · Openplc · Openplc

Name of the Vulnerable Software and Affected Versions: OpenPLC v3 b4702061dc14d1024856f71b4543298d77007b88 Description: An out-of-bounds read issue exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality. A specially crafted network request can lead to denial of service. An attacker c...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2024:3257-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3257-1 advisory. - Update to version 1.4.4.20git3.e7ac6d87: - CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. bsc1225512 -...

Vulnerability fixed in Kemp LoadMaster

Kemp Technologies has fixed a vulnerability in Kemp LoadMaster and Progress LoadMaster. A malicious party could exploit the vulnerability to execute arbitrary commands on the vulnerable system without prior authentication via specially prepared HTTP calls. For successful abuse, the malicious part...

Dell SmartFabric OS10 安全漏洞

Dell SmartFabric OS10 is the operating system that runs on Dell EMC network devices and provides a range of networking functions and features. A cross-site request forgery vulnerability exists in Dell SmartFabric OS10, which can be exploited by a remote attacker to submit a specially crafted...

node-tar: denial of service while parsing a tar file due to lack of folders depth validation

A flaw was found in ISAACS's node-tar, where it is vulnerable to a denial of service, caused by the lack of folder count validation. The vulnerability exists due to the application not properly controlling the consumption of internal resources while parsing a tar file. By sending a specially...

PT-2024-9888 · Loway · Loway Queuemetrics

Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to an observable response discrepancy in Loway QueueMetrics, which can be exploited by a remote attacker to gain unauthorized access to sensitive data by...

CVE-2024-44761

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests...

CVE-2024-44761

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests...

CVE-2024-44761

CVE-2024-44761 affects EQ Enterprise Management System prior to v2.0.0 and allows directory traversal via crafted requests. The root cause is not explicitly detailed in the provided content, but multiple sources confirm a traversal vulnerability impacting versions before 2.0.0. Reported impact is...

CVE-2024-44761

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted requests...

DEBIAN-CVE-2024-7954

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request...

PT-2024-7309 · Icms · Icms

Name of the Vulnerable Software and Affected Versions: iCMS affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability in the iCMS content management system. It can be exploited by a remote attacker using a specially crafted HTTP request,...

PT-2024-30097 · Apollo · Apollo

Name of the Vulnerable Software and Affected Versions: apollocongif apollo version 2.2.0 Description: An issue in apollocongif apollo allows a remote attacker to obtain sensitive information via a crafted request. Recommendations: For version 2.2.0, consider restricting access to sensitive...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain access to the software environment.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to the software environment by sending specially craft...