CVE-2024-22200 vantage6-UI docker image leaks software version information

vantage6-UI is the User Interface for vantage6. The docker image used to run the UI leaks the nginx version. To mitigate the vulnerability, users can run the UI as an angular application. This vulnerability was patched in 4.2.0...

PT-2024-1498 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was found in the setMacFilterRules function due to inadequate neutralization of special elements. This allows a remote attacker to execute arbitrary command...

PT-2024-20365 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the url parameter in the setUrlFilterRules function. This allows for potential exploitation. No information is provided about the estimat...

Cups Easy cross-site scripting vulnerability (CNVD-2024-12208)

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the batchno parameter on the /cupseasylive/stockissuancelinecreate.php page. An attacke...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

The vulnerability in Intel NUC’s built-in software arises from insufficient checking of input data, allowing attackers to exploit their privileges.

The vulnerability of Intel NUC’s built-in software is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

BELL-CVE-2023-52340

Bulletin has no description...

CVE-2023-51842

An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16...

The vulnerability in Intel NUC’s built-in software is related to errors during the removal of special components, allowing attackers to gain increased privileges.

The vulnerability of Intel NUC’s built-in software is related to errors during the removal of special components. Exploiting this vulnerability can allow an attacker to increase their privileges...

Monero: RPC service DOS

The RPC service running on port 18081 or 28081, 38081 was vulnerable to a denial-of-service attack due to a loop iterating until the maximum range of a 64-bit unsigned integer. The vulnerability was present in all versions after the commit b030f207517f59a5122409398549a02ac23829ae, up to and...

CVE-2023-5933 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests...

Squid Denial of Service Vulnerability (CNVD-2024-08086)

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A denial of service vulnerability exists in Squid versions prior to 6.6, which stems from an outdated pointer referenc...

BELL-CVE-2024-0727

Bulletin has no description...

BELL-CVE-2023-40549

Bulletin has no description...

BELL-CVE-2023-40550

Bulletin has no description...

BELL-CVE-2023-40551

Bulletin has no description...

The vulnerability of cloud software for creating and using Nextcloud Server’s data storage solution lies in the incorrect expiration time of user sessions, which allows attackers to intercept user sessions.

The vulnerability of cloud software for creating and using Nextcloud Server storage solutions is related to incorrect session duration. Exploiting this vulnerability can allow attackers to intercept user sessions...

The vulnerability of cloud software for creating and using Nextcloud Server’s data storage system, related to the unencrypted storage of critical information, allows attackers to compromise the passwords of arbitrary users.

The vulnerability of cloud software for creating and using Nextcloud Server storage involves the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose the passwords of arbitrary users...

GHSA-7G9J-G5JG-3VV3 Unauthenticated Nonce Increment in snow

Impact There was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it...

MAL-2024-885 Malicious code in wlwz-2312-7904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baca6b336baaa73d4bb4e2e5bffb1ecc4447699637d6d7b60302bcd641132c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...