10056 matches found
Automated Logic WebCtrl code-related vulnerabilities
Automated Logic WebCtrl is a server for Web-based building automation systems from Automated Logic, Inc. A code issue vulnerability exists in Automated Logic WebCtrl version 7.0 that stems from an unrestricted, dangerous type of file upload that could lead to an unauthenticated user executing...
CVE-2024-8525: Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file...
PT-2024-41496
Уязвимость программной платформы мониторинга AutoGRAPH Web связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путём отправки специально сформированного POST-запроса...
CVE-2024-48530
An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-48530
An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-48530
An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-48530: Allocation of Resources Without Limits or Throttling
An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...
eSoft Planner security vulnerabilities
eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that originates from an attacker being able to trigger a denial of service via a crafted POST request...
Netgear genie_bpa.cgi DoS
The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...
Netgear R8500 Router DoS
The vulnerability in the wireless.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters opmode, opmodean, and opmodean2. Exploiting this vulnerability allows a malicious actor to caus...
NETGEAR R7000P wireless.cgi DoS
The vulnerability in the wireless.cg script of NETGEAR R7000P router software is related to buffer overflow when processing the RADIUSAddr%dwla parameter. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POST request...
NETGEAR XR300 DoS
The vulnerability in the bridgewirelessmain.cgi script of NETGEAR XR300 router software is related to buffer overflows in the stack when processing the parameter ssidan. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POS...
Netgear R8500 Router DoS
The vulnerability in the usbremotesmbconf.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the sharename parameter. Exploiting this vulnerability allows a malicious actor to cause servi...
pptp.cgi DoS
The vulnerability in the pptp.cgi subroutine of Netgear’s router software models R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a malicious actor ...
Netgear R8500 ddns.cgi DoS
The vulnerability in the ddns.cgi microprogramming software of Netgear R8500 routers stems from the copying of buffers without checking the size of the input data during the processing of the sysDNSHos parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...
Netgear XR300 wireless.cgi DoS
The vulnerability in the wireless.cgi script of Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a...
NETGEAR R8500 Router DoS
The vulnerability in the ipv6fix.cgi script of NETGEAR R8500 router software is related to buffer overflows in the stack when processing the ipv6pridns parameter. Exploiting this vulnerability allows a remote attacker to trigger a Denial-of-Service attack by sending a specially crafted POST reque...
CVE-2024-48530
The eSoft Planner scheduling software (version 3.24.08271-USA ) is vulnerable to a Denial of Service (DoS) attack. The flaw exists within the Instructor Appointment Availability module , where an attacker can trigger the DoS by sending a crafted POST request . This issue is associated with CWE-77...
Netgear bsw_pppoe.cgi DoS
The vulnerability in the bswpppoe.cgi script of Netgear XR300, R7000P, and R6400 v2 routers stems from the copying of buffer data without checking the size of the input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...
Netgear XR300 DoS
The vulnerability in the bridgewirelessmain.cgi script of the Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the ssid parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by...