GitLab 16.9.7 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-8754)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An improper input validation error allows attacker to...

CVE-2024-21529

A flaw was found in the dset package. Affected versions of this package are vulnerable to Prototype Pollution via the dset function due to improper user input sanitization. This vulnerability allows the attacker to inject a malicious object property using the built-in Object property proto, which...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-43390 Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the FWNAT.INIP environment variable which can lead to a DoS...

CVE-2024-43389 Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices

A low privileged remote attacker can perform configuration changes of the ospf service through OSPFINTERFACE.SIMPLEKEY, OSPFINTERFACE.DIGESTKEY environment variables which can lead to a DoS...

CVE-2024-43388 Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation...

CVE-2024-42424

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations function in gettext.js due to improper user input sanitization...

CVE-2024-21528

CVE-2024-21528 affects the Node package node-gettext. The vulnerability is a Prototype Pollution flaw in the addTranslations() function of gettext.js caused by improper input sanitization. Affected versions are all reported versions; explicit exploit details or in-the-wild activity are not provid...

PT-2024-7324 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in UEFI firmware for some Intel processors, which may allow a privileged user to enable information disclosure or denial of...

Adobe Illustrator < 27.9.6 / 28.0.0 < 28.7.1 Multiple Vulnerabilities (APSB24-66)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.6, 28.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-66 advisory. - Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe Illustrator < 27.9.6 / 28.0.0 < 28.7.1 Multiple Vulnerabilities (APSB24-66) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 27.9.6, 28.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-66 advisory. - Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Improper Input Validation

github.com/cosmos/interchain-security is vulnerable to Improper Input Validation. The vulnerability is caused due to a missing validation on the ICS side to check if the signer matches the provider address. This can lead to any user opt-in, opt-out, change the commission rate, or change what publ...

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Progress Software has released security updates for a maximum-severity flaw in LoadMaster and Multi-Tenant MT hypervisor that could result in the execution of arbitrary operating system commands. Tracked as CVE-2024-7591 CVSS score: 10.0, the vulnerability has been described as an improper input...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by the individual developers of stemword. A cross-site scripting vulnerability exists in Inventory Management System version 1.0, which stems from a cross-site scripting attack caused by incorrect manipulation of the input alert1...

CVE-2024-39718

An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account...

CVE-2024-39718

CVE-2024-39718 is a vulnerability in Veeam Backup & Replication 12.x (notably affected builds include 12.1.2.172 and earlier) where a low-privileged user can remotely remove files with the service account’s permissions due to improper input validation. Connected sources confirm this CVE affects m...

CVE-2024-45178

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, du...

CVE-2024-45178

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, du...