1641 matches found
CVE-2023-5392
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning...
Honeywell C300 安全漏洞
Honeywell C300 is a controller from Honeywell USA. A security vulnerability exists in the Honeywell C300 that originates from allowing memory to be extracted over the network beyond that required for functionality...
CVE-2024-26205
Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...
CVE-2024-20259
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandle...
Cisco IOS 和 IOS XE Software 代码问题漏洞
Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...
AlmaLinux 9 : golang (ALSA-2024:1131)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1131 advisory. - A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network th...
PT-2024-19073
Name of the Vulnerable Software and Affected Versions Open Virtual Network OVN affected versions not specified Description A flaw was found in the Open Virtual Network OVN that can be exploited by an attacker to inject specially crafted BFD packets from inside unprivileged workloads, including...
Code injection
Transient DOS while processing CAG info IE received from NW...
CVE-2023-33103
CVE-2023-33103 is described across multiple sources as a Transient Denial of Service issue in Qualcomm chipsets related to processing CAG information elements received from the NW. The connected documents indicate this CVE is associated with Qualcomm closed‑source components (notably listed in th...
CVE-2023-6533 Silicon Labs PC Controller Denial of Service Vulnerability
Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...
CVE-2023-6533
The CVE describes a denial-of-service-like effect on Silicon Labs PC Controller by sending a malformed Device Reset Locally Command Class packet. Affected product: Silicon Labs PC Controller (v5.54.0 and earlier). Root cause: malformed local reset packets cause the controller to mark the end devi...
CVE-2024-24743 XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)
SAP NetWeaver AS Java CAF - Guided Procedures - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so...
Design/Logic Flaw
In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer...
CVE-2023-32328 IBM Security Verify Access information disclosure
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957...
CVE-2023-47568
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 2024011...
CVE-2023-41282
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596...
CVE-2023-47561 Photo Station
A cross-site scripting XSS vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 2023/12/15 and later...
CVE-2023-45028 QTS, QuTS hero, QuTScloud
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the...
Arbitrary Command Injection
network is vulnerable to Arbitrary Command Injection. The vulnerability is due to use of the childprocess.exec function without command sanitization. This allows an attacker to execute arbitrary OS commands through macaddressfor function...