33136 matches found
CVE-2024-48629
D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...
Mitsubishi Electric CNC Series (Update D)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Mitsubishi Electric Equipment : CNC Series Vulnerability : Improper Validation of Specified Quantity in Input 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated remote...
CVE-2024-45844
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-45844
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-48028
Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affects IP Loc8: from n/a through = 1.1...
CVE-2024-45844 BIG-IP monitors vulnerability
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-45844 BIG-IP monitors vulnerability
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-45844
CVE-2024-45844 affects F5 BIG-IP monitors vulnerability. The issue allows an authenticated attacker with Manager-level privileges (via Configuration utility or tmsh) to elevate privileges or modify configuration due to a monitor feature flaw. Affected BIG-IP versions and fixes: 15.1.x up to 15.1....
K000140061: BIG-IP monitors vulnerability CVE-2024-45844
Security Advisory Description BIG-IP monitor functionality may allow an authenticated attacker with at least Manager role privileges to elevate their privileges and/or modify the configuration. CVE-2024-45844 Impact This vulnerability may allow an authenticated attacker with Manager role privileg...
K000141080: BIG-IQ vulnerability CVE-2024-47139
Security Advisory Description A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IQ user interface that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user. CVE-2024-47139 Impact An authenticated...
CVE-2024-48028 WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affects IP Loc8: from n/a through = 1.1...
CVE-2024-48028
CVE-2024-48028 affects the WordPress plugin IP Loc8 (vulnerable:
CVE-2024-48028 WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affects IP Loc8: from n/a through = 1.1...
Security update for keepalived
This update for keepalived fixes the following issues: CVE-2024-41184: fixed integer overflow in vrrpipsetshandler bsc1228123 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...
F5 Networks BIG-IP : BIG-IP monitors vulnerability (K000140061)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.5 / 16.1.5 / 17.1.1.4. It is, therefore, affected by a vulnerability as referenced in the K000140061 advisory. BIG-IP monitor functionality may allow an authenticated attacker with at least Manager role privileges ...
F5 BIG-IP 访问控制错误漏洞
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. An access control error vulnerability exists in F5 BIG-IP that stems from a monitor feature that could allow an attacker to...
PT-2024-32945 · Boyan Raichev · Ip Loc8
Name of the Vulnerable Software and Affected Versions: Boyan Raichev IP Loc8 versions n/a through 1.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Boyan Raichev IP Loc8. This vulnerability can be exploited due to the deserialization of...
F5 Networks BIG-IP : Angular JS vulnerabilities (K000141459)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K000141459 advisory. CVE-2019-14863There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping t...
CVE-2024-49383
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...