CVE-2022-23088

CVE-2022-23088 affects FreeBSD’s net80211 802.11 beacon handling. The issue is a heap-buffer overflow caused by not validating the length of the IEEE 802.11s Mesh ID before copying it to a heap buffer, which can allow remote code execution when a FreeBSD Wi‑Fi client is in scanning mode and proce...

CVE-2022-23086

CVE-2022-23086 affects FreeBSD: the mpr/mps/mpt disk controller drivers expose _CFG_PAGE ioctls that allocate a caller-specified buffer size but copy a fixed-size header into it. This can result in heap data being overwritten if the input size is too small, potentially enabling privilege escalati...

CVE-2022-23084

CVE-2022-23084 concerns the FreeBSD netmap component. The vulnerability is a time-of-check to time-of-use bug in nmreq_copyin(): the total size of a user-provided nmreq is computed and then trusted during the copy, enabling kernel memory corruption. Impact requires netmap in devfs_ruleset; a priv...

CVE-2024-25941

The CVE-2024-25941 issue affects FreeBSD jail(2): the kern.ttys visibility is not limited, enabling an information leak of TTYs from the host or other jails. Exploitation details in the FreeBSD SA-24:02.tty advisory describe the vulnerability and its impact, with attackers potentially reading how...

CVE-2024-25940

CVE-2024-25940 concerns bhyveload(8) on FreeBSD where using -h grants loader access to the host’s directory tree. Affected bhyveload versions do not restrict access, enabling the loader to read any file the host user can access, potentially allowing exfiltration of sensitive data from the host (...

CVE-2024-25669

CaseAware a360inc contains a reflected cross-site scripting vulnerability in the user parameter passed to login.php. Exploitation could inject scripts into pages viewed by users, potentially enabling data theft, session hijacking, or defacement. The issue is reported as a bypass of a 2017 fix. Af...

Command injection

The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission...

Path traversal

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

Sql injection

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even...

Sql injection

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records...

CVE-2024-26264

CVE-2024-26264 concerns EBM Technologies RISWEB, where a specific query function parameter does not properly restrict input and the page is accessible without login. This enables remote SQL injection without authentication, allowing an attacker to read, modify, and delete database records. The co...

CVE-2024-26261

CVE-2024-26261 affects HGiga OAKlouds where certain modules expose an Arbitrary File Read and Delete via path parameters, enabling attackers to download files without authentication and subsequently delete them. The vulnerability stems from a path traversal/unsafe file access flaw in the file-dow...

CVE-2024-26260

HGiga OAKlouds is affected by an OS command injection in the synchronization function of certain modules, enabling remote command execution via specific request parameters. Root cause is input/sanitization in those parameters leading to arbitrary code execution on the server; CVSS v3.1 base score...

CVE-2024-1523

CVE-2024-1523 — EC-WEB FS-EZViewer(Web) suffers from an injectable SQL vulnerability in its query functionality caused by a lack of proper input restrictions. This allows a remote attacker authenticated as a regular user to inject SQL commands to read, modify, and delete database records, and to ...

Slackware: Security Advisory (SSA:2024-044-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-25373

CVE-2024-25373 affects Tenda AC10V4.0 (firmware V16.03.10.20). The vulnerability is a stack overflow in the sub_49B384 function triggered by processing the page parameter. Multiple connected sources confirm this issue across NVD/Red Hat/CNNVD entries, reinforcing that the root cause is a stack-ba...

CVE-2024-24256

CVE-2024-24256 concerns Yonyou space-time enterprise information integration platform (v.9.0 and earlier). The issue is a SQL injection in the gwbhAIM parameter of saveMove.jsp under the hr_position directory, enabling an attacker to obtain sensitive information. Multiple sources corroborate this...

CVE-2024-24386

CVE-2024-24386 affects VitalPBX v3.2.4-5. An attacker can run arbitrary code via a crafted payload to /var/lib/vitalpbx/scripts, caused by insufficient protection when processing a script from that directory (per PT-Security/Red Hat/NVD entries). Impact is high: remote code execution. Remediation...

Design/Logic Flaw

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

Information disclosure

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability...