CVE-2024-12353

CVE-2024-12353 affects SourceCodester Phone Contact Manager System 1.0, specifically the User Menu component’s UserInterface::MenuDisplayStart function. The vulnerability arises from improper input validation caused by manipulating the name argument, enabling a local attack. Public exploit detail...

CVE-2024-10771 SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code execution

Due to missing input validation during one step of the firmware update process, the product is vulnerable to remote code execution. With network access and the user level ”Service”, an attacker can execute arbitrary system commands in the root user’s contexts...

PT-2024-16908

Name of the Vulnerable Software and Affected Versions Hi e-learning Learning Management System LMS versions prior to 06.12.2024 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

CVE-2024-53982 Arbitrary file download in Zoo-Project Echo Example

ZOO-Project is a C-based WPS Web Processing Service implementation. A path traversal vulnerability was discovered in Zoo-Project Echo example. The Echo example available by default in Zoo installs implements file caching, which can be controlled by user-given parameters. No input validation is...

CVE-2018-9394

In mtkp2pwextsetkey of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glp2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Phoenix Contact PLCnext Improper Input Validation (CVE-2021-34570)

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

7-Zip Zstandard Decompression Integer Underflow Vulnerability - Windows

7zip is prone to a zstandard decompression integer underflow vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2024-35074 · WordPress · Wp Responsive Video

Name of the Vulnerable Software and Affected Versions: WP Responsive Video versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This means that an attacker cou...

RockyLinux 8 : container-tools:rhel8 (RLSA-2024:8846)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8846 advisory. Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library CVE-2024-9341 Buildah: Podman: Improper Input...

Cross-site Scripting (XSS)

baserCMS is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input validation in the blog post feature, allowing user-generated content to include malicious scripts...

ASB-A-350527097

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-337944529

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-9139 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to insufficient input validation of SNMP packets, whi...

The vulnerability of the Layout Templates component of the Oracle BI Publisher software allows a malicious individual to gain access to, modify, or delete data.

The vulnerability of the Layout Templates component in the Oracle BI Publisher reporting software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain read access, modify data, or even delete data...

D-Link DIR-605L formSetWanNonLogin Function Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-605L version 2.13B01 BETA, which originates from the webpage parameter of the formSetWanNonLogin function in the /goform/formSetWanNonLogin page that fails to correctly...

Denial Of Service (DoS)

JSON-lib is vulnerable to Denial Of Service DoS. The vulnerability is due to improper input validation and handling in the util/JSONTokener.java class, where the code fails to correctly process unbalanced comment strings in JSON data, allowing attackers to craft malicious JSON inputs that trigger...

Command Injection

@saltcorn/plugins-loader is vulnerable to command injection. The vulnerability is due to the lack of input validation on the user-controlled value req.body.name, allows users with admin permissions to manipulate the input by adding escaping characters, thereby executing arbitrary commands when th...

PT-2024-26093

Name of the Vulnerable Software and Affected Versions SamsungVideoPlayer versions prior to 7.3.29.1 SamsungVideoPlayer versions prior to 7.3.36.1 SamsungVideoPlayer versions prior to 7.3.41.230 Description The issue is related to improper input validation in SamsungVideoPlayer, allowing local...

Denial Of Service (DoS)

Mattermost is vulnerable to Denial Of Service DoS. The vulnerability is due to improper input validation, where Mattermost does not verify that the message in a permalink post is a string, allowing non-string values to be processed and causing a frontend crash...

CVE-2024-7835

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...