2214 matches found
CVE-2024-22772 Hitron Systems DVR LGUVR-8H Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR LGUVR-8H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22771 Hitron Systems DVR LGUVR-4H Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22771 Hitron Systems DVR LGUVR-4H Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR LGUVR-4H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22771
CVE-2024-22771 affects Hitron Systems DVR LGUVR-4H (versions 1.02–4.02). The vulnerability is caused by improper input validation, enabling a network-adjacent attacker to cause a denial-of-service condition when default admin credentials are used. Public documents confirm affected models and vers...
CVE-2024-22770 Hitron Systems DVR HVR-16781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22770 Hitron Systems DVR HVR-16781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22770
CVE-2024-22770 affects Hitron Systems DVR HVR-16781 versions 1.03–4.02. The flaw is improper input validation (CWE-20) in the DVRs that can enable a network-based attack when the device is accessed with default admin credentials. Public documentation (including Red Hat and other advisories) confi...
CVE-2024-22769 Hitron Systems DVR HVR-8781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-8781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22769 Hitron Systems DVR HVR-8781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-8781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22769
The CVE-2024-22769 entry concerns Hitron Systems DVR HVR-8781. Affected products include DVR HVR-8781 (and related models) with firmware versions 1.03–4.02, where improper input validation can enable a network-based attack when the device is accessed with default admin credentials. The official R...
CVE-2024-22768
CVE-2024-22768 affects Hitron Systems DVR HVR-4781 (and related models) with improper input validation that can be exploited to cause a denial-of-service when default admin credentials are used. Public advisories (CISA ICS) list affected models/versions (HVR-4781, HVR-8781, HVR-16781, LGUVR-4H/8H...
CVE-2024-22768 Hitron Systems DVR HVR-4781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-4781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
PT-2024-21509
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.19 and 6.7.7 Description The issue concerns a null pointer dereference in the 'nvidia-shield' component of the Linux kernel. This occurs because the devm kasprintf function returns a pointer to dynamically...
PT-2024-12896 · Westermo · Westermo Lynx 206-F2G
Name of the Vulnerable Software and Affected Versions: Westermo Lynx 206-F2G affected versions not specified Description: An attacker with access to the network where the affected devices are located could maliciously take actions to obtain, via a sniffer, sensitive information exchanged via TCP...
PT-2024-12258 · Nvidia · Nvidia Bluefield 2 +1
Name of the Vulnerable Software and Affected Versions: NVIDIA Bluefield 2 and Bluefield 3 DPU BMC affected versions not specified Description: The issue is related to a code injection vulnerability in ipmitool, where a root user may cause code injection by a network call, potentially leading to...
CVE-2023-40051
This issue affects Progress Application Server PAS for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system...
Design/Logic Flaw
This issue affects Progress Application Server PAS for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system...
OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)
Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or...
OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295)
Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or...
OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468)
Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or...