CVE-2024-4300

Summary of CVE-2024-4300 (FS-EZViewer(Web)) Affected software: E‑WEBInformationCo. FS‑EZViewer(Web). What is vulnerable: exposed sensitive information through the service; the page source reveals the database configuration file path without authentication, enabling access to credentials and datab...

CVE-2024-4296

The CVE-2024-4296 entry concerns HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock). The vulnerability arises from inadequate filtering of special characters in certain function parameters in the account management interface, enabling remote attackers with administrative privil...

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 is affected by CVE-2023-52726. The issue is an infinite repetition of error processing in the Subscribe function for the subscribed indication stream, which can lead to resource exhaustion (DoS). Exploitation status is not detailed in ...

CVE-2024-33266

CVE-2024-33266: SQL injection in Helloshop deliveryorderautoupdate up to v2.8.1 allows an attacker to execute arbitrary SQL via DeliveryorderautoupdateOrdersModuleFrontController::initContent. Root cause is unsafe handling of input in that controller, leading to unauthorized DB queries with poten...

CVE-2024-33449

The CVE-2024-33449 entry describes an SSRF vulnerability in the PDFMyURL service, allowing remote attackers to obtain sensitive information and execute arbitrary code by sending a POST request with the url parameter. Affected components are not explicitly enumerated in the provided documents, and...

CVE-2024-34043

CVE-2024-34043 affects O-RAN RICAPP kpimon-go I-Release. The vulnerability is a segmentation violation triggered by a certain E2AP-PDU message in that release. Documented impact notes are low severity with local access and minimal user interaction (CVSS v3.1 base score 5.3). Connected sources (Re...

CVE-2024-34049

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 is affected by a slice bounds out-of-range panic in reader.go when executing plmnIdString[0:3] and plmnIdString[3:]. The issue arises from improper bounds handling on the plmnIdString slice, which can lead to a crash (reported as DoS in som...

CVE-2024-33401

CVE-2024-33401 is a Cross-Site Scripting vulnerability in DedeCMS v5.7.113 where an attacker can exploit the mnum parameter to execute arbitrary code remotely. The connected documents consistently describe this vulnerability as XSS that permits code execution, but none provide a remediation or pa...

CVE-2023-46566

msoulier tftpy is affected by a Buffer Overflow in the parse function of the TftpPacketFactory class. Root cause: inadequate input validation leads to remote denial of service. Impact: remote attacker over the network can cause a DoS; no patch/version details are provided in the supplied document...

CVE-2024-34050

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 is affected by a slice bounds out-of-range panic in reader.go, triggered by returning uint64(b[2])<<16 | uint64(b[1])<

CVE-2024-34048

The CVE concerns O-RAN RIC I-Release e2mgr, with a root cause of missing array size checks in E2nodeConfigUpdateNotificationHandler. Affected software is O-RAN RIC I-Release e2mgr; no vendor/version specifics are provided in the sources. The vulnerability is described as enabling high-impact outc...

CVE-2024-34045

CVE-2024-34045 affects the O-RAN E2T I-Release Prometheus metric Increment function. The vulnerability is a crash in sctpThread.cpp triggered when Increment() is called for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment(). The dataset confirms this ca...

CVE-2024-33350

CVE-2024-33350 is a directory traversal vulnerability in TaoCMS v3.0.2 that allows a remote attacker to execute arbitrary code and access sensitive information via the include/model/file.php component. Affected software/component: TaoCMS 3.0.2; root cause: improper handling of include/model/file....

CVE-2024-31822

The CVE-2024-31822 issue affects Ecommerce-CodeIgniter-Bootstrap and is triggered by the saveLanguageFiles method in the Languages.php component (commit d22b54e8915f167a135046ceb857caaf8479c4da). The vulnerability allows a remote attacker to execute arbitrary code, with a CVSS v3.1 base score of ...

CVE-2023-52728

CVE-2023-52728 affects Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25. The vulnerability is an index out-of-range in the putBitString function, causing an availability impact (DoS) as per the CVSS data. Multiple connected sources corroborate the affected component/version and the root...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 is affected by an out-of-bounds array access in the processIndicationFormat1 function. CVE-2023-52724 is rated CVSSv3.1 base 8.1 (HIGH) with network attack vector, low attack complexity, and no user interaction. Veracode corroborates out-of-boun...

CVE-2024-31801

CVE-2024-31801 affects NEXSYS-ONE prior to Rev.15320. It is a directory traversal vulnerability allowing a remote attacker to obtain sensitive information via a crafted request. Root cause: improper handling of file paths in NEXSYS-ONE before Rev.15320. Impact: confidentiality loss of sensitive d...

CVE-2024-32269

CVE-2024-32269 affects Yonganda YAD-LOJ v3.0.561. A remote attacker can cause a denial of service via a crafted packet that targets the device. The issue is documented across multiple sources (NVD/Red Hat/CNNVD and PT Security) with the primary impact described as an unauthenticated, network‑driv...

CVE-2023-52727

The CVE concerns Open Networking Foundation's ONOS project, specifically the onos-lib-go component at version 0.10.25, with the root cause in parseAlignBits causing an index out-of-range condition. Reported impacts in multiple sources describe an Out-of-Bounds Read leading to potential Denial of ...

CVE-2024-33338

CVE-2024-33338 concerns jizhicms v2.5.4. The vulnerability is a Cross Site Scripting (XSS) flaw where content submitted via a crafted article publication request can disclose sensitive information. Red Hat and other sources corroborate XSS in jizhicms, noting that the content filtering happens cl...