Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

TOTOLINK A3600R cstecgi.cgi file setIpQosRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the comment parameter in the setIpQosRules function of the /cgi-bin/cstecgi.cgi file. An attacker...

Heap-based Buffer Overflow

fiona is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to improper handling of long filenames, comments, or extra fields in within zlib components that contain integer overflow vulnerabilities, which can result in an application crash or potential code execution...

openSUSE Security Advisory (SUSE-SU-2024:2413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secret Exposure

ops is vulnerable to Secret Exposure. The vulnerability is due to improper handling of secret content by passing it as CLI arguments which affects charms using Juju =3.0 and not correctly capturing and processing subprocess.CalledProcessError. The vulnerability allows an attacker to gain access t...

The vulnerability of the Control Protocol Director (l2cpd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Control Protocol Director l2cpd in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

SQL Injection

1Panel is vulnerable to SQL Injection. The vulnerability is due to improper handling of the User-Agent input, which results in SQL injection...

Important: tomcat9

Issue Overview: Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn l...

CVE-2024-38435

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...

SQL Injection

Apache Superset is vulnerable to SQL Injection. The vulnerability is caused due to improper handling of special elements used in SQL commands, specifically certain engine-specific functions are not checked, allowing attackers to bypass SQL authorization...

The vulnerability of the Windows Image Acquisition service in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Image Acquisition service in Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE-SU-2024:2539-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2024-34750: Fixed improper handling of exceptional conditions bsc1227399...

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2024:2485-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2485-1 advisory. Updated to version 9.0.91: - CVE-2024-34750: Fixed an improper handling of exceptional conditions bsc1227399. Tenable has...

Arbitrary File Overwrite

aim is vulnerable to Arbitrary File Overwrite. The vulnerability is due to improper handling of the runhash and repo.path parameters in the backuprun-function, allowing any file on the host server to be overwritten and arbitrary data to be exfiltrated...

CVE-2024-6396 Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim

A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated to create an...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to trigger a service failure.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to incorrect handling of exceptional states. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2024-39531

An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. If a value is configured for DDoS bandwidth or burst parameters for any...

CVE-2024-39541

CVE-2024-39541 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability arises in the Routing Protocol Daemon (rpd) when conflicting information about a node is added to the Traffic Engineering (TE) database and subsequently processed, causing rpd to crash and restart (unauthenti...

CVE-2024-39531 Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols

An Improper Handling of Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. If a value is configured for DDoS bandwidth or burst parameters for any...

PT-2024-28518 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S7-EVO Junos OS Evolved versions 21.2-EVO prior to 21.2R3-S8-EVO Junos OS Evolved versions 21.4-EVO prior to 21.4R3-S7-EVO Junos OS Evolved versions 22.2-EVO prior to 22.2R3-EVO Junos OS Evolved...