17421 matches found
CVE-2024-41661
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate...
HPESBNW04672 rev.2 - HPE Aruba Networking EdgeConnect SD-WAN Orchestrator, Multiple Vulnerabilities
Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Arbitrary Command Execution, Code Execution, Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software See Vulnerability Summary Affected Products...
Apache StreamPark Command Injection Vulnerability (CNVD-2024-33576)
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. A command injection vulnerability exists in Apache StreamPark versions prior to 2.0.0 to 2.1.4, which stems from poor validation of input parameters and can be exploited by an...
CVE-2020-24102
CVE-2020-24102 affects Punkbuster pbsv.d64 version 2.351. A directory traversal vulnerability could allow remote attackers to execute arbitrary code. Public sources consistently cite the vulnerable version as 2.351, with exploitation leading to code execution; however, explicit exploit details an...
Broadcom Symantec Privileged Access Management Command Execution Vulnerability
Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...
D-Link DAP-1325 SetHostIPv6StaticSettings Stack Buffer Overflow Vulnerability
D-Link DAP-1325 is a wireless access point/bridge made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network to wireless network or connect different wireless networks. The D-Link DAP-1325 suffers from a stack buffer overflow vulnerabilit...
ROS-20240719-05
A vulnerability in the ejs web application development pattern for Node.Js is related to incorrect neutralization of special elements in the output data used by the input component. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by injecting...
The vulnerability of the `createGlobalServerChannelInternal` method in the SolarWinds Access Rights Manager (ARM) access control software allows a perpetrator to execute arbitrary code.
The vulnerability of the createGlobalServerChannelInternal method in the SolarWinds Access Rights Manager ARM access control software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
foreman: Host ssh key not being checked in remote execution
A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in-the-middle attack MITM, denial of...
CVE-2024-36491
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service DoS condition...
CVE-2024-36491
FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to execute an arbitrary OS command, obtain and/or alter sensitive information, and cause a denial-of-service DoS condition...
CVE-2024-36491
CVE-2024-36491 affects FutureNet NXR/VXR/WXR series by Century Systems Co., Ltd. An administrative user can execute arbitrary OS commands, access/alter sensitive data, and trigger DoS. Public sources corroborate OS command injection (CWE-78) as the vulnerability class. Affected components are CLI...
The vulnerability of the IBM InfoSphere Information Server software platform, related to insufficient validation of incoming requests, allows a hacker to execute an SSRF attack.
The vulnerability of the IBM InfoSphere Information Server software integration platform is related to insufficient testing of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
Apache StreamPark 命令注入漏洞
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. A command injection vulnerability exists in Apache StreamPark versions prior to 2.0.0 to 2.1.4, which stems from poor validation of input parameters and can be exploited by an...
PT-2024-5684 · Unknown · Netcat Cms
Name of the Vulnerable Software and Affected Versions: Netcat CMS affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the netshop module of the Netcat CMS system. This allows a remote attacker to execute arbitrary JavaScript code...
HPESBGN04665 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities
Potential Security Impact: Local: Elevated Privileges, memory corruption, Buffer Overflow, Input Validation; Remote: Arbitrary Code Execution, Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC - Prior to v3.1.6 CVSS Scores: | C...
CVE-2024-38492
This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...
Advisory ROSA-SA-2024-2451
Software: samba 4.12.3 OS: ROSA Virtualization 2.1 packageevrstring: samba-4.12.3 CVE-ID: CVE-2020-25722 BDU-ID: 2022-00004 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the Active Directory Domain Controller component of the Samba networking software package is caused by a buffer overflow...
ROS-20240711-03
Vulnerability of NTFS file handler NtfsHandler.cpp of 7-Zip archiver is related to the possibility of heap-based buffer overflow of a heap-based buffer overflow. Exploitation of the vulnerability could allow an attacker, acting remotely, execute arbitrary code A vulnerability in the NTFS file...