8918 matches found
PT-2024-21020 · Dovecot · Dovecot
Name of the Vulnerable Software and Affected Versions: Dovecot affected versions not specified Description: The issue arises because Dovecot accepts the dot LF DOT LF symbol as the end of the DATA command, whereas the RFC requires it to be CR LF DOT CR LF. This discrepancy causes Dovecot to split...
Atlassian Confluence 7.20.x < 8.5.14 Multiple Vulnerabilities
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.19.26, 7.20.x prior to 8.5.14, 8.6.x prior to 8.9.5 or 9.0.x prior to 9.0.1. It is, therefore, affected by a reflected Cross-Site Scripting XSS and a CSRF Cross-Site Reques...
Atlassian Confluence 9.0.x < 9.0.1 Multiple Vulnerabilities
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.19.26, 7.20.x prior to 8.5.14, 8.6.x prior to 8.9.5 or 9.0.x prior to 9.0.1. It is, therefore, affected by a reflected Cross-Site Scripting XSS and a CSRF Cross-Site Reques...
Dovecot 安全漏洞
Dovecot is Dovecot Open Source an open source IMAP and POP3 mail server based on Linux/UNIX-like systems. A security vulnerability exists in Dovecot that stems from a non-RFC-compliant recognition of the DATA command end symbol, which causes a single message containing the LF DOT LF to be...
CVE-2024-8461
A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. T...
CVE-2024-8461
A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. T...
CVE-2024-8461
The CVE-2024-8461 case concerns D-Link DNS-320 firmware 2.02b01 where the Web Management Interface file /cgi-bin/discovery.cgi mishandles access, enabling information disclosure. Documents state the vulnerability can be triggered remotely and that public exploits exist. The affected product is en...
CVE-2024-8461 D-Link DNS-320 Web Management Interface discovery.cgi information disclosure
A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. T...
CVE-2024-8460
A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functionality of the file /cgi-bin/widgetapi.cgi of the component Web Management Interface. The manipulation of the argument getHD/getSer/getSys leads to...
CVE-2024-8460
A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functionality of the file /cgi-bin/widgetapi.cgi of the component Web Management Interface. The manipulation of the argument getHD/getSer/getSys leads to...
CVE-2024-8460 D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure
A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functionality of the file /cgi-bin/widgetapi.cgi of the component Web Management Interface. The manipulation of the argument getHD/getSer/getSys leads to...
CVE-2024-8460
The CVE-2024-8460 affects D-Link DNS-320 (2.02b01) Web Management Interface, specifically /cgi-bin/widget_api.cgi. The vulnerability arises from manipulating the getHD/getSer/getSys parameters, leading to information disclosure. Attacks can be launched remotely with high complexity, and exploitat...
SUSE CVE-2024-45306
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...
VulnCheck KEV: CVE-2024-6047
Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system commands. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
PT-2024-6520 · D Link · D-Link Dns-320
Name of the Vulnerable Software and Affected Versions: D-Link DNS-320 version 2.02b01 Description: The issue is related to the disclosure of information in the /cgi-bin/discovery.cgi file of the Web Management Interface component in the D-Link DNS-320 router's firmware. This can be exploited...
PT-2024-6451 · D Link · D-Link Dns-320
Name of the Vulnerable Software and Affected Versions: D-Link DNS-320 version 2.02b01 Description: A problematic issue has been found in the Web Management Interface of the D-Link DNS-320, specifically in the file /cgi-bin/widget api.cgi. The manipulation of the getHD, getSer, or getSys argument...
CVE-2024-42991
MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution...
SUSE CVE-2024-44947
In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fusenotifystore, unlike fusedoreadpage, does not enable page zeroing because it can be used to change partial page contents. So fusenotifystore must be more carefu...
MingSoft MCMS 安全漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingFei MingSoft. A security vulnerability exists in MingSoft MCMS version v5.4.1, which stems from improper handling of the front-end file upload function, and could lead to remote command execution...