PT-2024-5013 · D Link · D-Link Go-Rt-Ac750

Name of the Vulnerable Software and Affected Versions: D-Link Go-RT-AC750 version GORTAC750 A1 FW v101b03 Description: The issue is related to a stack-based buffer overflow via the hnap main function. An attacker can send a POST request to trigger the issue, potentially allowing a remote attacker...

PT-2024-23138 · Dormakaba · Dormakaba Saflok System +5

Name of the Vulnerable Software and Affected Versions: dormakaba Saflok system versions prior to November 2023 software update Saflok MT versions prior to November 2023 software update Confidant series versions prior to November 2023 software update Quantum series versions prior to November 2023...

Dormakaba Saflok security vulnerabilities

Dormakaba Saflok is an electronic locking system from Dormakaba. A security vulnerability in the Dormakaba Saflok system prior to version 2023.11, which stems from a UID-only dependency of the key derivation function, allows an attacker to use a pair of forged keycards to unlock all rooms in a...

CVE-2024-29916: Inefficient Algorithmic Complexity

The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the ke...

CVE-2024-27683: Stack-based Buffer Overflow

D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...

CVE-2024-29916

The dormakaba Saflok electronic locking system is vulnerable to the "Unsaflok" issue in versions prior to the November 2023 software update. The root cause is a flawed key derivation function that relies solely on a UID , allowing an attacker who possesses one active or expired keycard for a spec...

CVE-2024-27683

D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function hnapmain. An attacker can send a POST request to trigger the vulnerablilify...

CVE-2024-27683

The D-Link Go-RT-AC750 router, specifically firmware version GORTAC750_A1_FW_v101b03 and earlier, is vulnerable to a stack-based buffer overflow within the hnap_main function. The root cause is that operation results are stored outside of the memory buffer, which can be triggered by sending a spe...

Important Photon OS Security Update - PHSA-2024-4.0-0581

Updates of 'expat', 'linux-aws', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a...

Important Photon OS Security Update - PHSA-2024-3.0-0738

Updates of 'linux-aws', 'linux', 'nodejs', 'linux-secure', 'linux-esx', 'linux-rt', 'openvswitch' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-0227

Updates of 'linux-secure', 'linux-esx', 'linux', 'linux-rt' packages of Photon OS have been released...

org.apache.cxf.systests:cxf-systests-databinding (2.5.7), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.7) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.5.7)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.5.7 -...

org.apache.cxf.systests:cxf-systests-databinding (2.6.5), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.5) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.6.5)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.6.5 -...

org.apache.cxf.systests:cxf-systests-databinding (2.3.7), org.apache.cxf.systests:cxf-systests-jaxrs (2.3.7) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.3.7)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.3.7 -...

org.apache.cxf.systests:cxf-systests-databinding (2.1.10), org.apache.cxf.systests:cxf-systests-jaxrs (2.1.10) +10 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.10)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.1.10 -...

org.apache.cxf.systests:cxf-systests-databinding (2.6.12), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.12) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.6.12)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.6.12 -...

org.apache.cxf.systests:cxf-systests-databinding (2.7.14), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.14) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.7.14)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.7.14 -...

org.apache.cxf.systests:cxf-systests-databinding (2.3.9), org.apache.cxf.systests:cxf-systests-jaxrs (2.3.9) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.3.9)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.3.9 -...

org.apache.cxf.systests:cxf-systests-databinding (2.3.8), org.apache.cxf.systests:cxf-systests-jaxrs (2.3.8) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.3.8)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.3.8 -...