9442 matches found
CVE-2024-47864
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...
CVE-2024-47864
home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...
CVE-2024-47864
The CVE-2024-47864 issue affects Sharp home 5G HR02, Wi‑Fi STATION SH‑52B, and SH‑54C. It is a buffer overflow in the hidden debug function that can cause the product’s web console to go down. Evidence across multiple sources confirms the affected models and the vulnerability class, but explicit ...
CVE-2024-46873
Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker...
CVE-2024-46873
Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker...
CVE-2024-46873
CVE-2024-46873 concerns SHARP routers (SH-05L, SH-52B, SH-54C, HR02). The root cause is a hidden debug function that, when enabled, allows a remote unauthenticated attacker to execute arbitrary OS commands with root privileges. Public docs confirm this vulnerability alongside other SHARP router C...
PT-2024-32856 · Unknown · Home 5G Hr02 +2
Name of the Vulnerable Software and Affected Versions: home 5G HR02 affected versions not specified Wi-Fi STATION SH-52B affected versions not specified Wi-Fi STATION SH-54C affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the hidden debug...
CVE-2024-7726
There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...
SUSE CVE-2024-53257
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an ASP.NET configuration error. Creating a binary debug file allows a malicious actor to gain unauthorized access to confidential information.
The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an error in ASP.NET configuration: the creation of a binary debug file. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...
CVE-2024-49201
Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...
Remote File Orchestrator Extension 安全漏洞
Remote File Orchestrator Extension is an open source remote file orchestrator extension for Keyfactor. It is used to remotely manage various file-based certificate stores and can be easily extended to manage other certificate stores. A security vulnerability exists in Remote File Orchestrator...
CVE-2024-49201
Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...
CVE-2024-49201
The Keyfactor Remote File Orchestrator (also known as remote-file-orchestrator ) version 2.8 before 2.8.1 is susceptible to an Information Disclosure vulnerability. The root cause is that sensitive information could be exposed when the system is running at the debug logging level . To remediate t...
CVE-2024-49201
Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...
CVE-2024-49201
Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...
Multiple vulnerabilities in SHARP routers
Overview SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 - CVE-2024-45721 The hidden debug function is enabled CWE-489 - CVE-2024-46873 Buffer overflow vulnerability in the hidden debug function CWE-120 -...
Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page
Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page Vulnerability Overview The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. Identifier :...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-50268)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50268 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds ...