18921 matches found
CVE-2024-33773
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...
CVE-2024-33773
CVE-2024-33773 maps to a buffer overflow in /bin/boa on D-Link DIR-619L Rev.B 2.06B1, exploitable via the formWlanGuestSetup function and the webpage parameter. This allows remote authenticated users to trigger a DoS. Root cause is a memory corruption in the /bin/boa binary within the affected fi...
CVE-2024-33772
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...
CVE-2024-33772
CVE-2024-33772 describes a buffer overflow in D-Link DIR-619L Rev.B 2.06B1 firmware, triggered by the curTime parameter in /bin/boa via formTcpipSetup, leading to DoS for remote authenticated users. Multiple sources (NVD/NVD-derived CVE list, Red Hat advisory, CNVD/CNNVD entries, and OpenVAS/deta...
CVE-2024-33771
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...
PT-2024-3754 · D Link · D-Link Dir-619L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: A buffer overflow issue in the /bin/boa binary via the formWlanGuestSetup function allows remote authenticated users to trigger a denial of service DoS through the webpage parameter. This...
CVE-2024-34091
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...
CVE-2024-34091
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...
CVE-2024-34089
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...
CVE-2024-34091
Archer Platform 6 before 2024.04 contains a stored XSS vulnerability in the trusted application data store. A remote authenticated Archer user can store malicious HTML/JS, which executes in other users’ browsers and can render content inaccessible. A fixed release exists: 6.14.0.3 (and later). Re...
CVE-2024-34089
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...
CVE-2024-34091
An issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site scripting XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When...
CVE-2024-34089
CVE-2024-34089 concerns Archer Platform 6 prior to 2024.04 with a stored cross-site scripting (XSS) flaw. A remote authenticated Archer user can inject malicious HTML/JavaScript into a trusted application data store, which is then executed by victims’ browsers in the vulnerable app’s context. The...
CVE-2023-37407 IBM Aspera Orchestrator command execution
IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116...
Security Bulletin: IBM Aspera Orchestrator affected by a command injection vulnerability (CVE-2023-37407)
Summary IBM Aspera Orchestrator has addressed a vulnerability that could allow execution of arbitrary code CVE-2023-37407. Vulnerability Details CVEID:CVE-2023-37407 DESCRIPTION: IBM Aspera Orchestrator could allow a remote authenticated attacker to execute arbitrary commands on the system by...
Meinberg Multiple Vulnerabilities in LANTIME Products (CVE-2017-16786)
The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via 1 the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or 2 vectors involving curl support of the file schema in the...
Meinberg LANTIME Improper Filename Validation of the Upload Function (CVE-2023-1731)
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands. This plugin only works with Tenable.ot. Please visit...
PT-2024-20718 · Ibm · Ibm Mq Appliance
Name of the Vulnerable Software and Affected Versions: IBM MQ Appliance versions 9.3 CD and LTS Description: The issue is caused by improper bounds checking, leading to a heap-based buffer overflow. A remote authenticated attacker could overflow a buffer, potentially executing arbitrary code on t...
