CVE-2023-50700

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method...

CVE-2023-50700

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method...

CVE-2023-50700

Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged users via the D-Bus method...

CVE-2023-50700

CVE-2023-50700 affects Deepin dde-file-manager up to version 6.0.54. The vulnerability is described as an insecure permission issue where unprivileged users can invoke privileged operations via a D-Bus method. The common descriptions across SUSE, Red Hat, NVD, CNNVD, and others reiterate the same...

D-Link DIR-823X Code Execution Vulnerability

The D-Link DIR-823X is a wireless router from China's AUO D-Link. A code execution vulnerability exists in the D-Link DIR-823X AX3000 that stems from a failure to properly filter special elements of the constructed snippet in the /goform/setntp.ntpzoneval parameter. An attacker can exploit this...

The vulnerability of the SCADA system MasterSCADA 4D, related to incorrect restrictions on the path to the restricted access catalog, allows a intruder to read arbitrary files.

The vulnerability of the SCADA system MasterSCADA 4D is related to an incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2024:2571-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2571-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The...

SUSE-SU-2024:2571-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39371: iouring: check for non-NULL file pointer in iofilecanpoll bsc1226990. - CVE-2023-52846: hsr: Prevent use after free in prpcreatetaggedframe bsc122509...

The vulnerability of the hnap_main function in the D-LINK GO-RT-AC750 router software allows a hacker to cause a service failure.

The vulnerability of the hnapmain function in the D-LINK GO-RT-AC750 router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted POST reques...

CVE-2024-38437

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

CVE-2024-38438

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-38438

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-38437

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

CVE-2024-38438

CVE-2024-38438 refers to a D-Link vulnerability described as CWE-294: Authentication Bypass by Capture-replay. The connected sources list a CVSS v3.1 base score of 9.8 (Network, Privileges Required: None, User Interaction: None, Scope: Unchanged) with High impact on Confidentiality, Integrity, an...

CVE-2024-38438 D-Link - CWE-294: Authentication Bypass by Capture-replay

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-38438 D-Link - CWE-294: Authentication Bypass by Capture-replay

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-38437 D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

CVE-2024-38437

The CVE-2024-38437 entry relates to a D-Link router authentication bypass (CWE-288) in the DSL-225 model, described as exploitable via an alternate path or channel. According to PT-2024-5347, the issue allows a remote attacker to bypass authentication and potentially elevate privileges. No specif...

CVE-2024-38437 D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

CVE-2024-39962

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...