CVE-2024-43053

CVE-2024-43053 describes a local-memory corruption vulnerability in Qualcomm WLAN components, triggered by IOCTL calls from user space to read WLAN target diagnostic information. The underlying root cause is improper restriction of operations within the bounds of a memory buffer. Affected softwar...

PT-2024-30275 · Qualcomm · Qualcomm Windows Wlan Host

Name of the Vulnerable Software and Affected Versions: Qualcomm Windows WLAN Host affected versions not specified Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user space to read diagnostic information of the target WLAN. This corruption happens due ...

Understanding the Citrix Telemetry Service

Understanding the Citrix Telemetry Service The Citrix Telemetry Service plays a crucial role in maintaining and optimizing the user experience of Citrix products. This feature is designed to collect diagnostic, performance, and usage data from Citrix products back to Citrix. The information...

CVE-2024-41970 WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices

A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources...

CVE-2024-41970 WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices

A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources...

CVE-2024-41970

CVE-2024-41970 concerns multiple WAGO devices (e.g., CC100, Edge Controller 0752-8303/8000-0002, PFC100/200 series and related models) where a permissions misconfiguration on critical resources grants a low-privileged remote attacker access to forbidden diagnostic data. The issue is described as ...

CVE-2024-48966

The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedde...

CVE-2024-48966 Life2000 service tools for test and calibration do not support user authentication

The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedde...

CVE-2024-48966

The CVE-2024-48966 case affects Baxter Life2000 ventilator software tools used for testing and calibration, where the test/calibration tools do not require authentication. The root cause is lack of user authentication on these tools, enabling an attacker with access to the Service PC to obtain di...

CVE-2024-48966 Life2000 service tools for test and calibration do not support user authentication

The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedde...

Baxter Life2000 访问控制错误漏洞

The Baxter Life2000 is a mask-less non-invasive ventilator from Baxter. An access control error vulnerability exists in Baxter Life2000 version 06.08.00.00 and prior, which stems from unsupported user authentication, allowing an attacker to obtain diagnostic information or manipulate device...

CVE-2021-27702

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard...

ALSA-2024:9325 Low: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Authenticated user can kill any process when enabling...

CVE-2021-27702

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard...

D-Link DWR-2000M 命令注入漏洞

The D-Link DWR-2000M is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link DWR-2000M. A local attacker can exploit the vulnerability to execute arbitrary code by sending a crafted payload to the diagnostic function...

Low: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: Authenticated user can kill any process when enabling...

CVE-2024-51430

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

CVE-2024-51430

CVE-2024-51430 is an XSS vulnerability in SourceCodester’s Online Diagnostic Lab Management System (PHP v1.0). The flaw allows a remote attacker to execute arbitrary code by manipulating the Test Name parameter in the diagnostic/add-test.php component. The affected item is the online diagnostic l...

SourceCodester Online Diagnostic Lab Management System 安全漏洞

SourceCodester Online Diagnostic Lab Management System is an online diagnostic lab management system from SourceCodester open source. A security vulnerability exists in SourceCodester Online Diagnostic Lab Management System version v.1.0. A remote attacker can exploit this vulnerability to execut...

PT-2024-34632 · Unknown · Online Diagnostic Lab Management System Using Php

Name of the Vulnerable Software and Affected Versions: online diagnostic lab management system using php version 1.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It allows a remote attacker to execute arbitrary code via the Test Name parameter on the...