8982 matches found
CVE-2024-21545
Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 'Sys.Audit' or 'VM.Monitor' privileges to download arbitrary host files via the API. When handli...
CVE-2024-12248
Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution...
CVE-2024-30501
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.9.4...
CVE-2024-47939
Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service D...
CVE-2024-47553
A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate user input to the ssmctl-client command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the...
CVE-2024-47562
A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly neutralize special elements in user input to the ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands i...
CVE-2024-29907
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...
CVE-2024-24853
Incorrect behavior order in transition between executive monitor and SMI transfer monitor STM in some IntelR Processor may allow a privileged user to potentially enable escalation of privilege via local access...
medical monitoring device buffer overflow
The vulnerability of the microprogrammed software of the CMS8000 Patient Monitor and Epsimed MN-120 medical devices related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protecte...
VulnCheck KEV: CVE-2018-9276
Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console...
CMS8000 Patient Monitor Epsimed MN-120 File Upload
The vulnerability of the microprogrammed software in medical monitoring devices such as CMS8000 Patient Monitor and Epsimed MN-120 lies in the fact that requests are sent to a rigidly encoded external IP address. Exploiting this vulnerability allows an attacker to bypass security restrictions and...
Malicious code in ad-language-monitor (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1ba5efe213adabcd9ec80e0d1c0c6bb2ccc9d6d22d0646a386f1a23affb0ee Any computer that has this package installed or running should be considered...
MAL-2025-1205 Malicious code in ad-language-monitor (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1ba5efe213adabcd9ec80e0d1c0c6bb2ccc9d6d22d0646a386f1a23affb0ee Any computer that has this package installed or running should be considered...
Malicious code in ad_language_monitor_appscript (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-790 Malicious code in ad_language_monitor_appscript (npm)
--- -= Per source details. Do not edit below this line.=-...
WordPress WP Keyword Monitor Plugin <=1.0.5 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP Keyword Monitor versions = 1.0.5...
Malicious code in deribit-arbitrage-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64bc92786b02e2d413eda2df2dae650fcd3c651e901b32f32ba4fb5c27bbd258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1109 Malicious code in deribit-arbitrage-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64bc92786b02e2d413eda2df2dae650fcd3c651e901b32f32ba4fb5c27bbd258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux kernel drop_monitor DoS
The vulnerability of the dropmonitor component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
batman-adv DoS
The vulnerability of the dropmonitor component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...