CVE-2024-51228

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...

PT-2024-39615 · Ada.Cx · Ada.Cx

Name of the Vulnerable Software and Affected Versions: Ada.cx affected versions not specified Description: The issue concerns a blind server-side request forgery SSRF vulnerability in Ada.cx's Sentry configuration. This vulnerability is exploited through a data scraping endpoint, allowing for SSR...

CVE-2023-7260

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

CVE-2023-7260

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

CVE-2023-7260

OpenText CX-E Voice contains a path traversal vulnerability (affecting all versions through 22.4) that could allow arbitrary access to files on the system. The connected documents indicate the issue is a path traversal flaw but do not provide exploitation details. Mitigation: upgrade to a version...

CVE-2023-7260 A path traversal vulnerability has been discovered in OpenText™ CX-E Voice.

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

CVE-2023-7260 A path traversal vulnerability has been discovered in OpenText™ CX-E Voice.

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

PT-2024-15257

Name of the Vulnerable Software and Affected Versions OpenText CX-E Voice versions through 22.4 Description A Path Traversal vulnerability has been discovered, which could allow arbitrary access to files on the system. Recommendations For versions through 22.4, update to a version later than 22.4...

CVE-2023-7260: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

Malicious code in cx-web-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4311da313c4de72f9e25c5c573ce6a9ebe1bd2cb1c24d5b37af1e4e6d23717ab The OpenSSF Package Analysis project identified 'cx-web-themes' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7729 Malicious code in cx-web-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4311da313c4de72f9e25c5c573ce6a9ebe1bd2cb1c24d5b37af1e4e6d23717ab The OpenSSF Package Analysis project identified 'cx-web-themes' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in cx-api-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 315d3186e692fd6934de0d66c25255e03eb763a15daa0785e92e58a2abbbba60 The OpenSSF Package Analysis project identified 'cx-api-client-lite' @ 200.0.1 npm as malicious. It is considered malicious because: - The packa...

HPESBNW04669 rev.2 - Unauthenticated Remote Code Execution vulnerability in OpenSSH's Server (RegreSSHion)

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Fabric Composer See Vulnerability Summary Aruba EdgeConnect Enterprise Orchestration Software See Vulnerability Summary Aruba CX 10000 Switch Series See Vulnerability Summary...

HPESB3P04641 rev.3 - HPE Aruba ArubaOS-CX Switches, Multiple OpenSSH Vulnerabilities Impacting AOS-CX Switches

Potential Security Impact: Remote: Arbitrary Command Execution, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See Vulnerability Summary Aruba CX 4100i Switch Series See Vulnerability Summary Aruba CX 6000 Switch...

The vulnerability of Omron CX-Programmer software, which involves reading beyond the buffer in memory, allows a malicious actor to cause an unexpected termination of the application or expose protected information.

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or expose sensitive information through a specially...

The vulnerability of Omron Sysmac Studio and CX-One software, which is related to the use of the “Free” function for the pointer not at the beginning of the buffer, allows a hacker to execute arbitrary code.

The vulnerability of Omron Sysmac Studio and CX-One software, which are used for automating and managing manufacturing processes, stems from the use of the “Free” function for the pointer not at the beginning of the buffer. Exploiting this vulnerability allows an attacker to execute arbitrary cod...

CVE-2024-31412

Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-ALD-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed...

CVE-2024-31413

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-ALD-V4 The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior and Sysmac Studio SYSMAC-SE2 The version which was installed with a DVD...

CVE-2024-31413

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-ALD-V4 The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior and Sysmac Studio SYSMAC-SE2 The version which was installed with a DVD...

CVE-2024-31413

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-ALD-V4 The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior and Sysmac Studio SYSMAC-SE2 The version which was installed with a DVD...