CVE-2024-39521 Junos OS Evolved: CLI parameter processing issue allows privilege escalation

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

CVE-2024-39521 Junos OS Evolved: CLI parameter processing issue allows privilege escalation

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...

changedetection.io Cross-site Scripting vulnerability

Summary Input in parameter notificationurls is not processed resulting in javascript execution in the application Details changedetection.io version: v0.45.21 https://github.com/dgtlmoon/changedetection.io/blob/0.45.21/changedetectionio/forms.pyL226 for serverurl in field.data: if not...

GHSA-PWGC-W4X9-GW67 changedetection.io Cross-site Scripting vulnerability

Summary Input in parameter notificationurls is not processed resulting in javascript execution in the application Details changedetection.io version: v0.45.21 https://github.com/dgtlmoon/changedetection.io/blob/0.45.21/changedetectionio/forms.pyL226 for serverurl in field.data: if not...

The vulnerability of the sub_41C488() function in D-Link DIR-823G router’s software allows a hacker to induce a service failure.

The vulnerability of the sub41C488 function in D-Link DIR-823G router microprogramming software is related to errors in pointer manipulation during the processing of the GET parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_42AF30() function in D-Link DIR-823G router’s software allows a hacker to induce a service failure.

The vulnerability of the sub42AF30 function in D-Link DIR-823G router microprogramming software is related to errors in pointer manipulation when processing the Action parameter. Exploiting this vulnerability can allow an attacker to cause service failure...

The vulnerability of the FixMapCfgRpm component (/userRpm/FixMapCfgRpm.htm) in the microprogramming software for TP-Link routers such as TL-WR940N, TL-WR841N, and TL-WR740N allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the FixMapCfgRpm component /userRpm/FixMapCfgRpm.htm of the TP-Link routers TL-WR940N, TL-WR841N, and TL-WR740N lies in the copying of buffers without checking the size of the input data during the processing of the Changed parameter. Exploiting this vulnerability can allow a...

Security Bulletin: "Administration Console can process body parameters that were submitted in the query" may affect IBM TXSeries for Multiplatforms

Summary "Administration Console can process body parameters that were submitted in the query" may affect IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVE and the fix has been provided as special fix uploaded in IBM Fix Central. Vulnerability Detail...

The vulnerability of the pagemaker microprogramming software for multifunctional Lexmark devices allows a hacker to execute arbitrary code.

The vulnerability of the pagemaker microprogramming software for multifunctional Lexmark devices is related to access to resources through incompatible types during parameter processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2008-0002

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the...

The vulnerability of the pcre_compile() function in the Perl PCRE library allows a attacker to cause a service failure.

The vulnerability of the pcrecompile function in the Perl regular expression library PCRE is related to the occurrence of an out-of-buffer operation when processing the :. parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Apache Tomcat Sensitive Information Disclosure

Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in order to trigger the...

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool is related to a deficiency in the restriction on XML references to external objects during the processing of ReportTemplateService parameters. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the Intra-mode BTI implementation of Intel microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Intel microprogrammable processor’s Intra-mode BTI IMBTI implementation is related to errors in parameter processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CentOS 7 : firefox (RHSA-2022:0824)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0824 advisory. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a...

The vulnerability of the Intra-mode BTI implementation of Intel microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Intel microprogrammable processor’s Intra-mode BTI IMBTI implementation is related to errors in parameter processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Security fix for the ALT Linux 10 package thunderbird version 91.6.2-alt1

91.6.2-alt1 built March 15, 2022 Pavel Vasenkov in task 296375 March 8, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-26485 Use-after-free in XSLT parameter processing + CVE-2022-26486 Use-after-free in WebGPU IPC Framework...

Mozilla: Use-after-free in XSLT parameter processing

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: Removing an XSLT parameter during processing could have led to an exploitable use-after-free issue. There were reports of attacks in the wild abusing this flaw...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:0824)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0824-1 advisory. - Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 - Mozilla: Use-after-free in WebGPU IPC Framework CVE-2022-26486 - expat:...

RHEL 8 : firefox (RHSA-2022:0816)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0816 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...