CVE-2024-3845

Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. Chromium security severity: Low...

CVE-2024-21095

CVE-2024-21095 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access component). Affected versions: 19.12.0–19.12.22, 20.12.0–20.12.21, 21.12.0–21.12.18, 22.12.0–22.12.12, and 23.12.0–23.12.2. Root cause: insufficient input validation in the Web Access module, enabling a...

CVE-2024-21035

CVE-2024-21035 applies to Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV) component. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, allowing an unauthenticated attacker with network access via HTTP to comp...

PT-2024-4890 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

PT-2024-19894 · Buffalo · Buffalo Wireless Lan Routers

Name of the Vulnerable Software and Affected Versions: BUFFALO wireless LAN routers affected versions not specified Description: A plaintext storage of a password issue exists, which may allow a network-adjacent unauthenticated attacker with access to the product's login page to obtain configured...

CVE-2023-5392

C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning...

Honeywell C300 安全漏洞

Honeywell C300 is a controller from Honeywell USA. A security vulnerability exists in the Honeywell C300 that originates from allowing memory to be extracted over the network beyond that required for functionality...

CVE-2024-26205

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-20259

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandle...

Cisco IOS 和 IOS XE Software 代码问题漏洞

Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...

AlmaLinux 9 : golang (ALSA-2024:1131)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1131 advisory. - A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network th...

PT-2024-19073

Name of the Vulnerable Software and Affected Versions Open Virtual Network OVN affected versions not specified Description A flaw was found in the Open Virtual Network OVN that can be exploited by an attacker to inject specially crafted BFD packets from inside unprivileged workloads, including...

Code injection

Transient DOS while processing CAG info IE received from NW...

CVE-2023-33103

CVE-2023-33103 is described across multiple sources as a Transient Denial of Service issue in Qualcomm chipsets related to processing CAG information elements received from the NW. The connected documents indicate this CVE is associated with Qualcomm closed‑source components (notably listed in th...

CVE-2023-6533

The CVE describes a denial-of-service-like effect on Silicon Labs PC Controller by sending a malformed Device Reset Locally Command Class packet. Affected product: Silicon Labs PC Controller (v5.54.0 and earlier). Root cause: malformed local reset packets cause the controller to mark the end devi...

CVE-2023-6533 Silicon Labs PC Controller Denial of Service Vulnerability

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...

CVE-2024-24743 XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)

SAP NetWeaver AS Java CAF - Guided Procedures - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so...

Design/Logic Flaw

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer...

CVE-2023-32328 IBM Security Verify Access information disclosure

IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957...

CVE-2023-47568

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 2024011...