CVE-2024-12698 Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)

An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability CVE-2023-39325/CVE-2023-44487 where only unauthenticated streams were protected, not streams created by authenticated sources...

PT-2024-17513 · WordPress · Crm Wordpress Plugin – Repairbuddy

Name of the Vulnerable Software and Affected Versions: CRM WordPress Plugin – RepairBuddy versions up to 3.8120 Description: The issue arises from the plugin not properly validating a user's identity before updating their email through the wc update user data AJAX action. This allows authenticate...

PT-2024-40331 · Tshock +1 · Tshock +1

Name of the Vulnerable Software and Affected Versions: TShock versions prior to 5.2.1 OTAPI affected versions not specified Description: An issue with OTAPI's management of client connections leads to stale UUIDs remaining on RemoteClient instances after a player disconnects. This can cause a...

Envoy Proxy 安全漏洞

Envoy Proxy is a cloud-native, high-performance edge/intermediate/service proxy open-sourced by Envoy Proxy. A security vulnerability exists in Envoy Proxy that stems from the fact that sending a payload when resetting a request early could lead to a crash...

CVE-2024-12698

An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability CVE-2023-39325/CVE-2023-44487 where only unauthenticated streams were protected, not streams created by authenticated sources. Mitigation Red Hat Product Security does not have any mitigation...

Unspecified Vulnerability in ABB ASPECT

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that stems from the inclusion of a weak password reset rule vulnerability. An attacker could exploit this vulnerability to gain unauthorized...

wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit

...

CVE-2024-47761 GLPI vulnerable to account takeover via the password reset feature

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue...

CVE-2024-47761 GLPI vulnerable to account takeover via the password reset feature

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue...

CVE-2024-46340

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

CVE-2024-46340

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

CrushFTP 安全漏洞

CrushFTP is a file transfer server from CrushFTP, Inc. A security vulnerability exists in CrushFTP that stems from mishandling the password reset logic, which could lead to an account takeover...

TP-LINK WR845N 安全漏洞

The TP-LINK WR845N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK WR845N version V4200909 and version V4190219, which originates from transmitting user credentials in plain text after performing a restore of factory settings...

CVE-2024-46340

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

CVE-2024-46340

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

CVE-2024-46340

CVE-2024-46340 concerns TP-Link TL-WR845N(UN)_V4 firmware (190219–201214). Multiple sources confirm a vulnerability where user credentials are transmitted in plaintext after performing a factory reset. The Red Hat/NVD/CNNVD entries describe the affected model(s) and versions, with the issue roote...

PT-2024-36983

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description A vulnerability in the Linux kernel has been resolved, related to the virtio net module. When virtnet close is followed by virtnet open, some TX completions can remain unconsumed, leading to a...