Command injection

A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

Remote code execution

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

Symantec Messaging Gateway Security Vulnerability

Symantec Messaging Gateway is a suite of spam filters from Symantec USA. The product features anti-spam, anti-virus, advanced content filtering, and data leakage protection. A security vulnerability exists in Symantec Messaging Gateway version 9.5 and earlier. A remote anonymous attacker can...

Symantec Messaging Gateway Security Vulnerability

Symantec Messaging Gateway is a suite of spam filters from Symantec USA. The product features anti-spam, anti-virus, advanced content filtering, and data leakage protection. A security vulnerability exists in Symantec Messaging Gateway version 10.5 and prior versions. A remote anonymous attacker...

Biges Safe Life Technologies Electronics VGuard Security Breach

Biges Safe Life Technologies Electronics VGuard is a CCTV monitoring solution from Biges Safe Life Technologies Electronics. A security vulnerability exists in versions prior to Biges Safe Life Technologies Electronics VGuard V500.0003.R008.4011.C0012.B351. An attacker could exploit the...

CVE-2024-23625 D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

CVE-2024-23618 Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

CVE-2024-23615 Symantec Messaging Gateway Buffer Overflow

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root...

CVE-2024-23614 Symantec Messaging Gateway Buffer Overflow

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root...

rpm: TOCTOU race in checks for unsafe symlinks

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and...

rpm: TOCTOU race in checks for unsafe symlinks

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and...

PT-2024-1618 · D Link · D-Link Dap-1650

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 affected versions not specified Description: A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on t...

PT-2024-19973 · Arris · Arris Surfboard Sgb6950Ac2

Name of the Vulnerable Software and Affected Versions: Arris SURFboard SGB6950AC2 affected versions not specified Description: An arbitrary code execution issue exists, allowing an unauthenticated attacker to achieve code execution as root. Recommendations: At the moment, there is no information...

Vulnerability fixed in Cisco Unified Communications and Contact Center

Cisco has fixed a vulnerability in Unified Communications Manager and Contact Center. A malicious party could exploit it to execute arbitrary code with permissions from the web application. It is not out of the question that this could give the malicious party gain the ability to execute code tha...

Cisco Unified Communications Manager IM & Presence RCE (cisco-sa-cucm-rce-bWNzQcUm)

According to its self-reported version, Cisco Unified Communications Manager IM & Presence running on the report host is affected by a remote code execution RCE vulnerability. Due to improper processing of user-provided data that is being read into memory, an unauthenticated, remote, attacker can...

PT-2024-1619 · D Link · D-Link Dap-1650

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 affected versions not specified Description: A command injection issue exists when handling UPnP SUBSCRIBE messages, allowing an unauthenticated attacker to gain command execution on the device as root. The vulnerability is...

PT-2024-19970 · Symantec · Symantec Messaging Gateway

Name of the Vulnerable Software and Affected Versions: Symantec Messaging Gateway versions 10.5 and before Description: A buffer overflow vulnerability exists, allowing a remote, anonymous attacker to achieve remote code execution as root. Recommendations: For Symantec Messaging Gateway versions...

PT-2024-19969 · Symantec · Symantec Messaging Gateway

Name of the Vulnerable Software and Affected Versions: Symantec Messaging Gateway versions 9.5 and before Description: A buffer overflow issue exists, allowing a remote, anonymous attacker to achieve remote code execution as root. Recommendations: For Symantec Messaging Gateway versions 9.5 and...

Cisco Unified Communications Manager RCE (cisco-sa-cucm-rce-bWNzQcUm)

According to its self-reported version, Cisco Unified Communications Manager running on the report host is affected by a remote code execution RCE vulnerability. Due to improper processing of user-provided data that is being read into memory, an unauthenticated, remote, attacker can execute...

Cisco Unity Connection RCE (cisco-sa-cucm-rce-bWNzQcUm)

According to its self-reported version, Cisco Unity Connection running on the report host is affected by a remote code execution RCE vulnerability. Due to improper processing of user-provided data that is being read into memory, an unauthenticated, remote, attacker can execute arbitrary code with...