1468 matches found
CVE-2024-48419
The CVE-2024-48419 entry concerns the Edimax BR-6476AC router (version 1.06) with a Command Injection vulnerability in /bin/goahead. The issue can be triggered via /goform/tracerouteDiagnosis, /goform/pingDiagnosis, and /goform/fromSysToolPingCmd, allowing an attacker with web interface access to...
CVE-2023-37014
Open5GS MME versions = 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a UE Context Release Request message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...
The vulnerability of the FortiOS operating system’s interface allows a perpetrator to compromise the accessibility of protected information.
The vulnerability of FortiOS operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...
The vulnerability of the web interface of the IBM Sterling B2B Integrator software allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the web interface of the IBM Sterling B2B Integrator software solution relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and gain unauthorized access to protected...
The vulnerability of the web interface of the IBM Sterling B2B Integrator software allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the web interface of the IBM Sterling B2B Integrator software solution relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain unauthorized access to protected...
CVE-2025-23018
IPv4-in-IPv6 and IPv6-in-IPv6 tunneling RFC 2473 do not require the validation or verification of the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an exposed network interface. This is a similar issue to CVE-2020-10136...
CVE-2025-23051
CVE-2025-23051 affects ArubaOS (AOS-8 through AOS-10) — a web-based management interface vulnerability allows an authenticated user to perform parameter injection to overwrite arbitrary system files. Root cause: parameter injection in the authenticated context. Impact: potential compromise of sys...
The vulnerability in the web interface of the microprogramming software for wireless client bridges from HPE Aruba Networking 501 allows a attacker to execute arbitrary code in the device’s basic operating system.
The vulnerability of the web interface for managing microprogramming software in HPE Aruba Networking 501 wireless client bridges is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...
Vulnerability of web-based interfaces for microprogramming software Wi-Fi routers such as Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360 allow attackers to increase their privileges
The vulnerability of the web-based management interfaces for Netis microprogramming systems, including Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360, lies in the ability to read data beyond the permitted range in memory. Exploitin...
The vulnerability of the web interface or command interface of the Lenovo XClarity Controller (XCC) for Lenovo ThinkSystem servers allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface or command interface of the Lenovo XClarity Controller XCC for Lenovo ThinkSystem servers is related to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a...
CVE-2024-29971
Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...
CVE-2024-29971
Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...
CVE-2024-29970
Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals...
CVE-2024-25371
Gramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability due to mismatching SW signals vs HW exceptions...
The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) allows a attacker to execute XSS attacks.
The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage relates to the lack of protection for the web page structure during the processing of element fields. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by sendin...
CVE-2024-29971
Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals...
CVE-2024-29970
Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals...
PT-2025-2387 · Gramine · Gramine
Name of the Vulnerable Software and Affected Versions: Gramine versions prior to a390e33e16ed374a40de2344562a937f289be2e1 Description: The issue is related to an interface vulnerability due to mismatching software signals versus hardware exceptions. This occurs because the software signals do not...
Scontain SCONE 安全漏洞
Scontain SCONE is a secure container environment from Scontain. A security vulnerability exists in Scontain SCONE version 5.8.0, which stems from the presence of an interface vulnerability that can lead to state corruption via injection signals...