8914 matches found
RAD Data Communications SecFlow-2
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : RAD Data Communications Equipment : SecFlow-2 Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
The vulnerability of the bgpd/bgp_label.c file in the networking routing implementation software for Unix-like systems allows a hacker to cause a service failure.
The vulnerability of the bgpd/bgplabel.c file in the networking routing implementation software for Unix-like systems in FRRouting is related to the inability to read data beyond the end of the stream during the analysis of marked one-way broadcasts. Exploiting this vulnerability could allow a...
CVE-2024-5741 XSS in inventory view
Stored XSS in inventory tree rendering in Checkmk before 2.3.0p7, 2.2.0p28, 2.1.0p45 and 2.0.0 EOL...
PT-2024-37358 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 2.5-DEV-rev228-g11067ea92-master Description: A problem was found in the function xmt node end of the file src/scene manager/loader xmt.c of the component MP4Box. The issue leads to use after free. Local access is required to...
Dell Secure Connect Gateway Access Control Error Vulnerability
Dell Secure Connect Gateway is a secure connectivity gateway from Dell, Inc. An access control error vulnerability exists in Dell Secure Connect Gateway versions prior to 5.24.00.00, which stems from an improperly access controlled REST API issue that could be exploited by a remote attacker to...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, USA. A security vulnerability exists in Google Pixel, which stems from a data uninitialization in the AcvpOnMessage module of avcp.cpp, which may result in an EOP...
Motorola Solutions Vigilant Fixed LPR Coms Box Security Vulnerability
Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. A security vulnerability exists in Motorola Solutions Vigilant Fixed LPR Coms Box version 3.1.171.9 and prior versions, which stems from the fact that data transmitted between the...
SUSE CVE-2023-39176
A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose...
CVE-2024-37161 MeterSphere front-end editor stores XSS vulnerability
MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system's step editor stores cross-site scripting vulnerabilities. Version 1.10.1-lts fixes this issue...
CVE-2024-37161 MeterSphere front-end editor stores XSS vulnerability
MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system's step editor stores cross-site scripting vulnerabilities. Version 1.10.1-lts fixes this issue...
June 11, 2024—KB5039274 (Security-only update)
None None...
KB5039337: Servicing stack update for Windows 10: June 11, 2024
None None...
KB5039334: Servicing stack update for Windows 10, version 1607 and Server 2016: June 11, 2024
None None...
KB5039342: Servicing stack update for Windows Server 2012: June 11, 2024
KB5039342: Servicing stack update for Windows Server 2012: June 11, 2024 End of support information Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until...
KB5039340: Servicing stack update for Windows Server 2012 R2: June 11, 2024
KB5039340: Servicing stack update for Windows Server 2012 R2: June 11, 2024 End of support information Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend...
HPESBNW04658 rev.1 - HPE Aruba AirWave Management Platform, Multiple OpenSSH Vulnerabilities
Potential Security Impact: Remote: Arbitrary Command Execution, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform See Vulnerability summary Affected Products HPE Aruba Networking AirWave Management Platform 8.3.0....
aiohttp: DoS when trying to parse malformed POST requests
An infinite loop flaw was found in aiohttp when handling POST multipart/form-data requests. This flaw allows an attacker to send a specially crafted request, leading the server to enter an infinite loop and render it unable to process any further requests. This denial of service can be triggered ...
CVE-2024-5786 Cross-Site Request Forgery vulnerability in Comtrend router
Cross-Site Request Forgery vulnerability in Comtrend router WLD71-T1v2.0.201820, affecting the GRG-4280us version. This vulnerability allows an attacker to force an end user to execute unwanted actions in a web application to which he is authenticated...
RHEL 7 : bind, bind-dyndb-ldap, and dhcp (RHSA-2024:3741)
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3741 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...
