CVE-2024-23603

CVE-2024-23603 is an SQL injection in the BIG-IP Configuration utility, specifically in the BIG-IP Advanced WAF/ASM Configuration utility. A highly privileged authenticated attacker can exploit it to execute malicious SQL statements. Affected: BIG-IP Advanced WAF/ASM; vulnerable in 17.1.0 and 16....

CVE-2024-23603 BIG-IP Advanced WAF and ASM Configuration utility vulnerability

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28745

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28745

The CVE-2023-28745 vulnerability affects Intel’s QSFP+ Configuration Utility software across all versions. It is caused by an uncontrolled search path, enabling an authenticated user with local access to potentially escalate privileges. The issue is documented with a CVSS v3.1 base score of 6.7 (...

K000138047: BIG-IP Advanced WAF and BIG-IP ASM Configuration utility vulnerability CVE-2024-23603

Security Advisory Description A SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. CVE-2024-23603 Impact A highly privileged authenticated attacker can exploit this vulnerability to execute malicious SQL statements through the BIG-IP Configuration...

[SECURITY] Fedora 38 Update: rust-vmm-sys-util-0.12.1-2.fc38

A system utility set...

Fedora: Security Advisory for rust-vmm-sys-util (FEDORA-2024-f2305d485f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-28745: Uncontrolled Search Path Element

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-19961 · F5 · F5Os Qkview Utility

Name of the Vulnerable Software and Affected Versions: F5OS QKView utility affected versions not specified Description: A directory traversal vulnerability exists in the F5OS QKView utility, allowing an authenticated attacker to read files outside the QKView directory. Note that software versions...

CVE-2024-21782: Improper Neutralization of Special Elements used in an OS Command

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

F5 BIG-IP SQL Injection Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. F5 BIG-IP suffers from an SQL injection vulnerability that originates from an SQL injection vulnerability in an undisclosed pa...

Intel Extreme Tuning Utility Security Vulnerability

Intel Extreme Tuning Utility is a software from Intel Corporation that can increase CPU frequency. In addition to supporting overclocking of CPUs and graphics cards, the program also features system hardware information detection and real-time monitoring of current system status to ensure system...

F5 Networks BIG-IP : BIG-IP Advanced WAF and BIG-IP ASM Configuration utility vulnerability (K000138047)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000138047 advisory. A SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration...

F5 F5OS Path Traversal Vulnerability

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 devices to support its application delivery control and security features. A security vulnerability exists in the F5 F5OS QKView utility that originates from allowing an authenticated attacker to read files outside of the...

PT-2024-19958

Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified Description An SQL injection issue exists in an undisclosed page of the BIG-IP Configuration utility. The exact nature of the issue and its potential impact are not fully detailed, but it suggests a...

CVE-2024-23603: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-25112

A flaw was found in the Exiv2 command-line utility. The denial of service is triggered when Exiv2 is used to read the metadata of a crafted video file. An unbounded recursion can cause Exiv2 to crash by exhausting the stack...

PT-2024-2700

Name of the Vulnerable Software and Affected Versions Intel QSFP+ Configuration Utility versions all Description The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their...

Intel® QSFP+ Configuration Utility Software Advisory

Summary: A potential security vulnerability in some Intel® QSFP+ Configuration Utility software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® QSFP+ Configuration Utility softwar...