CVE-2025-22905

The EDIMAX RE11S router, specifically version 1.11 , is vulnerable to a command injection flaw. The issue resides in the command parameter of the /goform/mp API endpoint, which may allow for unauthorized command execution. While no specific patch version is provided, the recommended workaround is...

EDIMAX RE11S security vulnerabilities

EDIMAX RE11S is a router from EDIMAX. A security vulnerability exists in EDIMAX RE11S v1.11, which stems from the discovery that the command parameter via /goform/mp contains a command injection vulnerability...

org.jboss.narayana.rts:lra-test-arquillian-extension (6.0.0.final), org.wildfly:wildfly-galleon-pack (>=28.0.0.beta1, <=28.0.1.final) +3 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (6.0.0.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 6.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-test-arquillian-extension 6.0.0.final -...

CVE-2024-48197

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface...

CVE-2024-48197

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface...

CVE-2024-48197

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface...

CVE-2024-48197: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface...

AudioCodes MP-202B security vulnerability

The AudioCodes MP-202B is an analog VoIP adapter from AudioCodes Israel. It is used to connect to POTS phones or fax machines. A security vulnerability exists in AudioCodes MP-202B version v.4.4.3, which stems from a cross-site scripting vulnerability that allows remote attackers to elevate...

CVE-2024-48197

A Reflected Cross Site Scripting (XSS) vulnerability exists in the Audiocodes MP-202b (version 4.4.3 ) analog VoIP adapter. The flaw is located in the login page of the web interface , where improper neutralization of input during web page generation allows a remote attacker to escalate privilege...

Update Rollup 9 for System Center 2016 Operations Manager

Update Rollup 9 for System Center 2016 Operations Manager Applies To System Center 2016 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2016 Operations Manager. This article also contains the installation instructions...

CVE-2024-54009: Exposure of Sensitive Information to an Unauthorized Actor

Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be remotely exploited to allow disclosure of information...

Hewlett Packard Enterprise Alletra Storage MP B10000 security vulnerability

The Hewlett Packard Enterprise Alletra Storage MP B10000 HPE Alletra Storage MP B10000 is an enterprise-class block storage appliance from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Alletra Storage MP B10000 versions prior to 10.4.5, which stems...

HPESBST04764 rev.1 - HPE Alletra MP OS, Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage MP B10000 - Prior to v10.4.5 HPE GreenLake for Block Storage MP OS - Prior to v10.4.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

A flaw was found in the MP4/MOV demuxer and memory allocator in the GStreamer library. Processing a specially crafted input file can cause an integer overflow in the qtdemuxparsetheoraextension function. This issue leads to a small amount of memory being allocated to store a large input size,...

mp_apply Heap Buffer Overflow DoS

The vulnerability of the “mpapply” application programming interface of the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the lack of measures taken to neutralize the special elements used in the operating system...

PT-2024-9479 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: The issue exists due to the lack of neutralization of special elements us...

Siemens SIPORT MP security vulnerabilities

SIPORT is a comprehensive, modular and reliable system for access control and time management in the Monitoring Access Suite. An elevation of privilege vulnerability exists in Siemens SIPORT, which can be exploited by a local attacker with an unprivileged account to overwrite or modify the servic...

DEBIAN-CVE-2024-49927

In the Linux kernel, the following vulnerability has been resolved: x86/ioapic: Handle allocation failures gracefully Breno observed panics when using failslab under certain conditions during runtime: can not alloc irqpinlist -1,0,20 Kernel panic - not syncing: IO-APIC: failed to add irq-pin. Can...

AZL-52944 CVE-2024-49927 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/ioapic: Handle allocation failures gracefully Breno observed panics when using failslab under certain conditions during runtime: can not alloc irqpinlist -1,0,20 Kernel panic - not syncing: IO-APIC: failed to add irq-pin. Can...