CVE-2024-45844

CVE-2024-45844 affects F5 BIG-IP monitors vulnerability. The issue allows an authenticated attacker with Manager-level privileges (via Configuration utility or tmsh) to elevate privileges or modify configuration due to a monitor feature flaw. Affected BIG-IP versions and fixes: 15.1.x up to 15.1....

K000140061: BIG-IP monitors vulnerability CVE-2024-45844

Security Advisory Description BIG-IP monitor functionality may allow an authenticated attacker with at least Manager role privileges to elevate their privileges and/or modify the configuration. CVE-2024-45844 Impact This vulnerability may allow an authenticated attacker with Manager role privileg...

K000141080: BIG-IQ vulnerability CVE-2024-47139

Security Advisory Description A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IQ user interface that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user. CVE-2024-47139 Impact An authenticated...

CVE-2024-48028 WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affects IP Loc8: from n/a through = 1.1...

CVE-2024-48028 WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affects IP Loc8: from n/a through = 1.1...

CVE-2024-48028

CVE-2024-48028 affects the WordPress plugin IP Loc8 (vulnerable:

Security update for keepalived

This update for keepalived fixes the following issues: CVE-2024-41184: fixed integer overflow in vrrpipsetshandler bsc1228123 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

F5 Networks BIG-IP : BIG-IP monitors vulnerability (K000140061)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.5 / 16.1.5 / 17.1.1.4. It is, therefore, affected by a vulnerability as referenced in the K000140061 advisory. BIG-IP monitor functionality may allow an authenticated attacker with at least Manager role privileges ...

F5 BIG-IP 访问控制错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. An access control error vulnerability exists in F5 BIG-IP that stems from a monitor feature that could allow an attacker to...

PT-2024-32945 · Boyan Raichev · Ip Loc8

Name of the Vulnerable Software and Affected Versions: Boyan Raichev IP Loc8 versions n/a through 1.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Boyan Raichev IP Loc8. This vulnerability can be exploited due to the deserialization of...

F5 Networks BIG-IP : Angular JS vulnerabilities (K000141459)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K000141459 advisory. CVE-2019-14863There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping t...

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49383

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49383

CVE-2024-49383 affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690. The root cause is the acep-importer service binding to an unrestricted IP address, creating an excessive attack surface. Documents from multiple sources confirm the affected product/version and the potential...

CVE-2024-49383

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49382

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49382

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

CVE-2024-49382

The CVE-2024-49382 issue affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690. The archive-server service binds to an unrestricted IP address, creating an excessive attack surface due to exposure. A confirmed remediation is to update to build 38690 or later; PT Security also ...

SUSE CVE-2024-49214

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality...