118 matches found
MGT-COMMERCE CloudPanel Security Vulnerability
MGT-COMMERCE CloudPanel is a free solution from MGT-COMMERCE Open Source. Designed to ease the burden of managing self-hosted Linux servers. A security vulnerability exists in MGT-COMMERCE CloudPanel versions 2.0.0 to 2.4.0, which stems from susceptibility to directory traversal attacks that allo...
CVE-2024-24320
Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the service parameter of the load-logfiles function...
Fedora 38 : et (2024-bd9e67c117)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bd9e67c117 advisory. Update to 6.2.8, fixing CVE-2022-48257 and CVE-2022-48258 ---- Unbundle cpp-httlib, fixing CVE-2023-26130 Tenable has extracted the preceding...
Fedora 39 : et (2024-94a155818c)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-94a155818c advisory. Update to 6.2.8, fixing CVE-2022-48257 and CVE-2022-48258 ---- Unbundle cpp-httlib, fixing CVE-2023-26130 Tenable has extracted the preceding...
Fedora 40 : et (2024-b745c97f4b)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b745c97f4b advisory. Update to 6.2.8, fixing CVE-2022-48257 and CVE-2022-48258 ---- Unbundle cpp-httlib, fixing CVE-2023-26130 Tenable has extracted the preceding...
CVE-2023-39167
In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data...
CVE-2023-39167
In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data...
CVE-2023-39167
CVE-2023-39167 affects SENEC Storage Box V1, V2 and V3, where an unauthenticated remote attacker can obtain device logfiles containing sensitive data due to an improper access control vulnerability. CVSS v3.1 base score 7.5 (HIGH) with network attack vector, low attack complexity, no privileges, ...
CVE-2023-39167 SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerability
In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data...
PT-2023-26821 · Senec · Senec Storage Box
Name of the Vulnerable Software and Affected Versions: SENEC Storage Box versions V1, V2, and V3 Description: An unauthenticated remote attacker can obtain the devices' logfiles that contain sensitive data. Recommendations: For versions V1, V2, and V3, restrict access to the logfiles to prevent...
Siemens SICAM A8000 Improper Access Control (CVE-2021-45034)
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70C All versions V16.20, CP-8000 MASTER MODULE WITH I/O -40/+70C All versions V16.20, CP-8021 MASTER MODULE All versions V16.20, CP-8022 MASTER MODULE WITH GPRS All versions V16.20. The web server of the affected system...
openSUSE 15 Security Update : EternalTerminal (openSUSE-SU-2023:0041-1)
The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0041-1 advisory. - In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. CVE-2022-48257 - In Eternal Terminal 6.2.1, etserver a...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
Code injection
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
PT-2023-15653 · Unknown · Eternal Terminal
Name of the Vulnerable Software and Affected Versions: Eternal Terminal version 6.2.1 Description: The issue concerns predictable logfile names in /tmp for etserver and etclient. Recommendations: For Eternal Terminal version 6.2.1, consider renaming or restricting access to the logfiles in /tmp t...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
net/eternalterminal -- Multiple vulnerabilities
Mitre reports: etserver and etclient have predictable logfile names in /tmp and they are world-readable logfiles...
CVE-2022-48258
CVE-2022-48258 affects EternalTerminal 6.2.1; etserver and etclient create world-readable logfiles, enabling potential exposure of logs containing sensitive data. The CVSS v3.1 base score is 5.3 (Medium) with Confidentiality impact Low. Remediation: update to 6.2.8 (and related package fixes) as ...