4441 matches found
CVE-2024-50361
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The source of the vulnerability relies on...
CVE-2024-33616
Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...
CVE-2024-33616
CVE-2024-33616 affects Sharp MFPs (Sharp Multi-Function Printers). Reported issue: admin authentication can be bypassed using specific invalid credentials, allowing login with administrative privileges. The telnet feature is noted as present only on older models, with Sharp planning a firmware up...
CVE-2024-33616
Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege. Sharp Corporation states the telnet feature is implemented on older models only, and is planning to provide the firmware update to remove the feature. As for the...
The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation in simulation models for systems and processes involves writing beyond buffer boundaries, allowing attackers to execute arbitrary code.
The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation lies in the issue of buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created WRL files...
EnGenius多款产品 注入漏洞
The EnGenius ENH1350EXT and others are an outdoor wireless access point from EnGenius. An injection vulnerability exists in several EnGenius products, which stems from a command injection due to incorrect operation of the parameter countryCode. The following products are affected: EnGenius...
PT-2024-17160 · Engenius · Engenius Ens500-Ac +2
Name of the Vulnerable Software and Affected Versions: EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT versions up to 20241118 Description: A critical issue affects an unknown function of the file /admin/network/wifi schedule. The manipulation of the argument wifi schedule day em 5 leads to command...
PT-2025-6422
Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server affected versions not specified Description The issue is related to an integer overflow or wraparound error in the model loading API. This can be triggered by loading a model with an extra-large file size,...
Unlocking Google Workspace Security: Are You Doing Enough to Protect Your Data?
Google Workspace has quickly become the productivity backbone for businesses worldwide, offering an all-in-one suite with email, cloud storage and collaboration tools. This single-platform approach makes it easy for teams to connect and work efficiently, no matter where they are, enabling seamles...
PYSEC-2024-295
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...
DEBIAN-CVE-2024-53425
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...
UBUNTU-CVE-2024-53425
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...
The vulnerability in the wlg_adv.cgi script of Netgear’s router microprogramming software for models R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.
The vulnerability in the wlgadv.cgi script of Netgear’s router microprogramming devices, such as R8500, XR300, R7000P, and R6400 v2, stems from the copying of buffers without checking the size of the input data during the processing of parameters apmodedns1pri and apmodedns1sec. Exploiting this...
WAGO多款产品 安全漏洞
WAGO PFC100 and others are products of WAGO, Germany.WAGO PFC100 is a programmable logic controller PLC.WAGO CC100 0751-9x01 is a compact controller.WAGO Edge Controller 0752-8303/8000-0002 is a controller. A security vulnerability exists in a number of WAGO products. The vulnerability stems from...
The vulnerability of the opennurbs.dll library, a software for modeling, designing, and drafting in AutoCAD, allows a malicious actor to cause the application to terminate abnormally or execute arbitrary code.
The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute...
FreeBSD : FreeBSD -- Multiple issues in the bhyve hypervisor (eb5c615d-a173-11ef-9a62-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the eb5c615d-a173-11ef-9a62-002590c1f29c advisory. Several vulnerabilities were found in the bhyve hypervisor's device models. The NVMe driver...
kernel: Possible Denial of Service on Intel(R) Processors
A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...
CVE-2024-51190
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the ptRuleApplicationName1.1.6.0.0 parameter on the /specialap.htm page...
Subverting LLM Coders
Really interesting research: "An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection": Abstract : Large Language Models LLMs have transformed code completion tasks, providing context-based suggestions to boost...
CVE-2024-20534
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...