313 matches found
CVE-2023-41917 Improper input validation in Kiloview P1/P2 devices allows for remote code execution
Inadequate input validation exposes the system to potential remote code execution RCE risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution...
Vulnerabilities discovered in Kiloview P1 4G Video Encoder and P2 4G Video Encoder
Vulnerabilities have been discovered in Kiloview P1 and P2. Kiloview P1 and P2 are hardware solutions for streaming image information in HDMI format. The firmware of these systems contains a number of serious vulnerabilities that allow a malicious person to perform attacks that can lead to the...
Kiloview P1 and P2 Security Vulnerabilities
Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder are both professional video encoder devices from Kiloview China. A security vulnerability exists in the Kiloview P1 and P2. An attacker could exploit the vulnerability to execute unauthenticated commands that could manipulate data,...
Kiloview P1 and P2 Security Vulnerabilities
Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder are both professional video encoder devices from China-based Kiloview. A security vulnerability exists in the Kiloview P1 and P2, which stems from insufficient input validation. The vulnerability can be exploited to execute arbitrary...
Kiloview P1 and P2 Security Vulnerabilities
The Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder are both professional video encoder devices from Kiloview, a Chinese company. A security vulnerability exists in the Kiloview P1 and P2 that stems from the device's acceptance of the deprecated TLS protocol...
Kiloview P1 4G Video Encoder and P2 4G Video Encoder Security Vulnerabilities
Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder are both professional video encoder devices from China-based Kiloview. A security vulnerability exists in the Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder, which stems from disabling encryption on port 80, which may...
Kiloview P1 and P2 Security Vulnerabilities
Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder are both professional video encoder devices from China-based Kiloview. A security vulnerability exists in the Kiloview P1 and P2 that stems from the use of hard-coded credentials...
OPENSUSE-SU-2024:10715-1 dhcp-4.4.2.P1-2.4 on GA media
These are all security issues fixed in the dhcp-4.4.2.P1-2.4 package on the GA media of openSUSE Tumbleweed...
CVE-2023-30314
An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which could lead to a denial of service...
360 Safe Router P1 安全漏洞
360 Safe Router P1 is a wireless router from Qihoo Technology Limited 360, a company based in Beijing, China. A security vulnerability exists in 360 Safe Router P1, 360 V6G, 360 T5G, 360 T6M that originates from the router allowing an attacker to hijack a TCP session, which could result in a deni...
AutomationDirect Productivity PLCs
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : AutomationDirect Equipment : Productivity PLCs Vulnerabilities : Buffer Access with Incorrect Length Value, Out-of-bounds Write, Stack-based Buffer Overflow, Improper Access Control, Active...
CVE-2022-2929 affecting package dhcp for versions less than 4.4.3.P1-1
CVE-2022-2929 affecting package dhcp for versions less than 4.4.3.P1-1. An upgraded version of the package is available that resolves this issue...
BIT-MAGENTO-2020-9691
Magento versions 2.3.5 and earlier, and 2.3.5 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution...
BIT-MAGENTO-2021-28585 Magento Commerce improper input validation in customer customer webapi
Magento versions 2.4.2 and earlier, 2.4.1 and earlier and 2.3.6 and earlier are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails...
CVE-2023-48641
Archer Platform 6.x before 6.14 P1 HF2 6.14.0.1.2 contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass...
BIT-NGINX-INGRESS-CONTROLLER-2022-41742
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to cause a worker process crash, or might...
CVE-2022-24093
Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution...
CVE-2022-24093
Summary: CVE-2022-24093 affects Adobe Commerce and Magento Open Source, with an improper input validation vulnerability that could enable post-authentication arbitrary code execution. Affected versions (per sources): Adobe Commerce 2.4.3-p1 and earlier; 2.3.7-p2 and earlier (and related 2.x lines...
XML Injection
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to XML Injection via the widgets update layout. An attacker with administrative privileges can execute arbitrary commands by submitting specially crafted XML data. Remediation...
