CVE-2024-47142: Insufficiently Protected Credentials

AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently protected credentials, which may allow a network-adjacent authenticated attacker to perform unintended operations...

CVE-2024-51766: Improper Handling of Exceptional Conditions

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL T9208 product. This vulnerability could be exploited to cause a denial of service DoS to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series...

HPESBNS04759 rev.1 - HPE NonStop DISK UTIL, Local Denial of Service vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. DISK UTIL T9208 -- L-series: T9208L01, T9208L01^ACE, T9208L01^ACG, T9208L01^ACH, T9208L01^ACJ -- J-series: All J-series product versions T9208H01 to T9208H01^ACI -- Affected RVU...

PT-2024-9088 · Tp Link · Tp-Link Archer C7

Name of the Vulnerable Software and Affected Versions: TP-Link ARCHER-C7 version v5 Description: The issue is related to incorrect access control in the l 0 0.xml component, which allows attackers to access sensitive information. This can be exploited by a remote attacker to gain unauthorized...

CVE-2024-51820

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wplsquared L Squared Hub WP l-squared-hub-wp-virtual-device allows SQL Injection.This issue affects L Squared Hub WP: from n/a through = 1.0...

CVE-2024-51820

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in L Squared Support L Squared Hub WP allows SQL Injection.This issue affects L Squared Hub WP: from n/a through 1.0...

CVE-2024-51820 WordPress L Squared Hub WP plugin <= 1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in L Squared Support L Squared Hub WP allows SQL Injection.This issue affects L Squared Hub WP: from n/a through 1.0...

CVE-2024-51820 WordPress L Squared Hub WP plugin <= 1.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wplsquared L Squared Hub WP l-squared-hub-wp-virtual-device allows SQL Injection.This issue affects L Squared Hub WP: from n/a through = 1.0...

CVE-2024-51820

CVE-2024-51820 is an SQL Injection in L Squared Hub WP – Virtual Device Plugin. The vulnerable component is the L Squared Hub WP plugin, with impact described as SQL injection risk and affected versions from n/a through 1.0. Root cause: improper neutralization of input used in SQL commands. Publi...

CVE-2024-51820: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wplsquared L Squared Hub WP l-squared-hub-wp-virtual-device allows SQL Injection.This issue affects L Squared Hub WP: from n/a through = 1.0...

WordPress L Squared Hub WP plugin <= 1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin L Squared Hub WP versions = 1.0...

WordPress L Squared Hub WP Plugin <= 1.0 is vulnerable to SQL Injection

Software L Squared Hub WP Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51820 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID b1c1c7bbdde2 Credits LVT-tholv2k Required privilege Contributor Published...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659: Improper Neutralization of Special Elements used in a Command

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659

Digital China Networks DCME-320-L wireless routers (versions 9.3.2.114 and earlier) are vulnerable to a command injection flaw in the log_u_umount.php component. A remote attacker can exploit this issue to execute arbitrary code on the affected device. To mitigate this risk, users are recommended...

PT-2024-33178 · Unknown · Dcme-320-L

Name of the Vulnerable Software and Affected Versions: DCME-320-L versions prior to 9.3.2.114 Description: The issue allows a remote attacker to execute arbitrary code via the log u umount.php component. Recommendations: For versions prior to 9.3.2.114, update to a version that contains a fix for...

PT-2024-9832 · Siemens · Tecnomatix Plant Simulation +1

Name of the Vulnerable Software and Affected Versions: Teamcenter Visualization versions prior to V14.2.0.14 Teamcenter Visualization versions prior to V14.3.0.12 Teamcenter Visualization versions prior to V2312.0008 Tecnomatix Plant Simulation versions prior to V2302.0016 Tecnomatix Plant...

CVE-2024-39502 ionic: fix use after netif_napi_del()

In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netifnapidel When queues are started, netifnapiadd and napienable are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and...