zenml Session Fixation vulnerability

A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim's JWT token...

CVE-2024-2083

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The...

CVE-2024-2260

A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim's JWT token...

CVE-2024-2083 Directory Traversal in zenml-io/zenml

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps endpoint. Attackers can exploit this vulnerability by manipulating the 'logs' URI path in the request to fetch arbitrary file content, bypassing intended access restrictions. The...

CVE-2024-2083

A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically in the /api/v1/steps endpoint. Exploitation opportunities arise by manipulating the logs URI path, bypassing access restrictions due to lack of validation for directory traversal patterns. The issue is descr...

CVE-2024-2260 Session Fixation Vulnerability in zenml-io/zenml

A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim's JWT token...

CVE-2024-2260

CVE-2024-2260 affects zenml-io/zenml. The issue is a session fixation vulnerability where JWT tokens are not invalidated at logout, allowing an attacker to reuse a victim’s token to bypass authentication. This is a token-centric impact with the potential for limited confidentiality and integrity ...

CVE-2024-2260 Session Fixation Vulnerability in zenml-io/zenml

A session fixation vulnerability exists in the zenml-io/zenml application, where JWT tokens used for user authentication are not invalidated upon logout. This flaw allows an attacker to bypass authentication mechanisms by reusing a victim's JWT token...

SUSE CVE-2024-26764

In the Linux kernel, the following vulnerability has been resolved: fs/aio: Restrict kiocbsetcancelfn to I/O submitted via libaio If kiocbsetcancelfn is called for I/O submitted via iouring, the following kernel warning appears: WARNING: CPU: 3 PID: 368 at fs/aio.c:598 kiocbsetcancelfn+0x9c/0xa8...

CVE-2024-30210

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

CVE-2024-28878

IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code...

CVE-2024-28878

CVE-2024-28878 affects IO-1020 Micro ELD (IOSiX) prior to version 360. The issue is that the device downloads code from an adjacent location and executes it without adequately verifying origin or integrity, enabling potential code execution with high impact (confidentiality, integrity, availabili...

CVE-2024-31069 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD web server uses a default password for authentication...

CVE-2024-31069 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD web server uses a default password for authentication...

CVE-2024-30210

IOSiX IO-1020 Micro ELD is affected by CVE-2024-30210 due to default WIFI credentials in versions prior to 360. The vulnerability allows an adjacent attacker to connect to the device over wireless, with an attacker-adjacent access vector and low attack complexity, potentially yielding high confid...

CVE-2024-30210 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

CVE-2024-30210 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

IOSIX IO-1020 Micro ELD 安全漏洞

The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in versions prior to the IOSIX IO-1020 Micro ELD 360 that stems from a web server using a default password for authentication...

IO-1020 Micro ELD 安全漏洞

The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in previous versions of the IO-1020 Micro ELD 360 that stems from the use of a default WIFI password that could allow a neighboring attacker to connect to the device...

CVE-2024-31937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...