11368 matches found
CVE-2024-3036
ABB 800xA Base (PC-based client/server nodes) versions 6.0.0 through 6.1.1-2 are affected by CVE-2024-3036, an Improper Input Validation (CWE-20) vulnerability that could crash services by processing specially crafted messages. Reported CVSS scores: v3.1 base 5.7 (AV:A, AC:L, PR:L, UI:N, S:U, A:H...
(Pwn2Own) Phoenix Contact CHARX SEC-3100 Config Manager Improper Input Validation Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CharxSystemConfigManager service, which listens on...
Phoenix Contact CHARX SEC-3100 charx_pack_logs Improper Input Validation Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3100 charging controllers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...
Dell Client BIOS Improper Input Validation (DSA-2024-125)
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. Note that Nessus has not tested for this issue but has instead...
Apache Superset server arbitrary file read
Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...
Important: Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update
Migration Toolkit for Applications 6.2.3 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
LG SuperSign CMS Cross-Site Scripting Vulnerability
LG SuperSign CMS is a content management software solution optimized for LG webOS kanbanban from Luckin LG Korea. A cross-site scripting vulnerability exists in LG SuperSign CMS versions 4.1.3 through 4.3.1, which stems from improper input neutralization during web page generation, resulting in...
Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products
Summary Vulnerabilities in Apache Tomcat affect the product's management GUI, potentially allowing denial of service. The Command Line Interface is unaffected. CVE-2024-23672, CVE-2024-24549. Vulnerability Details CVEID:CVE-2024-23672 DESCRIPTION: Apache Tomcat is vulnerable to a denial of servic...
PT-2024-25897 · Unknown · Slider Revolution
Name of the Vulnerable Software and Affected Versions: Slider Revolution versions prior to 6.7.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...
CVE-2024-37794
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...
CVE-2024-37794
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...
CVE-2024-37794
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...
CVE-2024-37794
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...
CVE-2024-37794
Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...
CVE-2024-37794
CVE-2024-37794 affects CVC5 Solver v1.1.3. The vulnerability stems from improper input validation in SMT2 input handling, allowing a DoS via a crafted input file. Exploitation details are not provided here, but multiple connected sources confirm the DoS impact. Remediation is to update to a newer...
PT-2024-27754 · Unknown +1 · Cvc5 Solver +1
Name of the Vulnerable Software and Affected Versions: CVC5 Solver version 1.1.3 Description: The issue is related to improper input validation, which allows attackers to cause a Denial of Service DoS by providing a crafted SMT2 input file. Recommendations: For version 1.1.3, update to a newer...
Vantiva MediaAccess DGA2232 Cross-Site Scripting Vulnerability
Vantiva MediaAccess DGA2232 is an application from Vantiva, Inc. A cross-site scripting vulnerability exists in Vantiva MediaAccess DGA2232 version v19.4, which stems from improper neutralization of input during web page generation...
CVE-2024-5961 Reflected XSS in 2ClickPortal
Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software...
CVE-2024-32907
In memcalladd of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-32903
In prepareresponselocked of lwistransaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...