12570 matches found
CVE-2024-41968 WAGO: Docker Settings Manipulation in Multiple Devices
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS...
CVE-2024-41968
CVE-2024-41968 affects WAGO devices (e.g., CC100 0751-9x01; Edge Controller 0752-8303/8000-0002; PFC100/PFC200 series; TP600 variants) where a low-privilege, remote attacker can modify the device’s docker settings, enabling a limited Denial of Service. The NVD entry assigns CVSS 3.1 v3.1 base sco...
CVE-2024-41968 WAGO: Docker Settings Manipulation in Multiple Devices
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS...
PT-2024-29668
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited Denial of Service DoS. Recommendations At the...
CVE-2024-41968: Missing Authentication for Critical Function
A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS...
WAGO多款产品 访问控制错误漏洞
WAGO PFC100 and others are products of WAGO, a German company.WAGO PFC100 is a programmable logic controller PLC.WAGO CC100 0751-9x01 is a compact controller.WAGO Edge Controller 0752-8303/8000-0002 is a controller. A security vulnerability exists in several WAGO products. The vulnerability stems...
Fedora 37 : golang-github-docker-distribution (2022-21aa9bae12)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-21aa9bae12 advisory. Automatic update for golang-github-docker-distribution-2.8.1-2.20220821gitbc6b745.fc37. Changelog Sun Aug 21 2022 Robert-Andr Mauchin 2.8.1-2 - Upda...
Docker Brocade SANnav Information Disclosure
The vulnerability of the Docker software for network management in Brocade SANnav relates to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to read or modify protected information...
Docker Daemon Unauthorized Access
The vulnerability of the Docker Daemon software for managing Brocade SANnav networks is related to the improper assignment of permissions to a critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
Fedora 38 : golang-github-docker-distribution (2022-59cb9da3d4)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-59cb9da3d4 advisory. Automatic update for golang-github-docker-distribution-2.8.1-2.20220821gitbc6b745.fc38. Changelog Sun Aug 21 2022 Robert-Andr Mauchin 2.8.1-2 - Upda...
io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...
io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +9 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.25)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...
org.jenkins-ci.plugins.workflow:workflow-aggregator (1.7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.7) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.7 -...
io.jenkins.plugins:zohosprints (>=1.0, <=1.1.4), org.jenkins-ci.plugins:build-name-setter (2.0.4) +6 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.54)
org.jenkins-ci.plugins:script-security MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:zohosprints =1.0, =2.4, =2.62.1, =2.2, =1.78, =2.0.0, =1.14,...
com.logmein:pipeline-bamboo (>=0.0.1, <=0.0.2), de.taimos:pipeline-aws (>=1.0, <=1.13) +5 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.21)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.logmein:pipeline-bamboo =0.0.1, =1.0, =y, =2.2.0, =1.0, =0.6, =0.6,...
org.jenkins-ci.plugins:docker-workflow (>=1.7, <=1.9.1) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.7)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:docker-workflow =1.7, =1.9.1 Source cves:...
Exploit for CVE-2024-21534
CVE-2024-21534: Remote Code Execution Vulnerability in jsonpa...
GHSA-7HPF-G48V-HW3J Zoraxy has an authenticated command injection in the Web SSH feature
Summary A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Details Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH servers from their browsers. In...
Zoraxy has an authenticated command injection in the Web SSH feature
Summary A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Details Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH servers from their browsers. In...