11711 matches found
CVE-2024-27135
Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of the sandboxes designated for running user-provided functions. This vulnerability also applies to the Pulsar Broker when it is...
CVE-2024-26001
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization...
CVE-2024-26002
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files...
CVE-2024-25999
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service...
CVE-2024-25997
An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected...
CVE-2024-25994
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only...
Input validation
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files...
Input validation
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only...
CVE-2024-26002 PHOENIX CONTACT: File ownership manipulation in CHARX Series
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files...
CVE-2024-26002
CVE-2024-26002 affects Phoenix Contact CHARX SEC plctool on CHARX SEC-3100 devices. The issue is an improper input validation that allows a local, low-privilege attacker to escalate to root by changing ownership of specific files (local exploit, no user interaction required according to the CVE d...
CVE-2024-26001 PHOENIX CONTACT: Out of bounds write only memory access
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization...
CVE-2024-26001
Phoenix Contact CHARX SEC series devices (e.g., CHARX SEC-3100/CHARX SEC-3000 family) are affected by a vulnerability in the MQTT stack where improper input validation allows an unauthenticated, remote attacker to write memory out of bounds. The issue is described as a buffer/length validation fl...
CVE-2024-26001 PHOENIX CONTACT: Out of bounds write only memory access
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization...
CVE-2024-26000 PHOENIX CONTACT: Out of bounds read only memory access
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization...
CVE-2024-26000 PHOENIX CONTACT: Out of bounds read only memory access
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization...
CVE-2024-25999 PHOENIX CONTACT: Privilege escalation in the OCPP agent service
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service...
CVE-2024-25999 PHOENIX CONTACT: Privilege escalation in the OCPP agent service
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service...
CVE-2024-25998 PHOENIX CONTACT: Command injection in the OCPP Service
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation...