CVE-2024-56072

An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service application crash via a crafted packet that specifies many sFlow samples...

CVE-2024-56072

An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service application crash via a crafted packet that specifies many sFlow samples...

CVE-2024-56072

An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service application crash via a crafted packet that specifies many sFlow samples...

CVE-2024-56072

CVE-2024-56072 affects FastNetMon Community Edition up to 1.2.7, with the sFlow v5 plugin allowing remote attackers to cause a denial-of-service (application crash) by sending a crafted packet containing many sFlow samples. Technical details across connected docs confirm the issue, its impact (Do...

CVE-2024-56072

An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service application crash via a crafted packet that specifies many sFlow samples...

CVE-2024-54135

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/photoupload.php within the decodekey function. User inputs were supplied to this function...

CVE-2024-54135

Summary: CVE-2024-54135 affects ClipBucket-v5 (versions 2.0–5.5.1 Revision 199). The root cause is improper sanitization of user input in upload/photo_upload.php’s decode_key function, which calls PHP unserialize (photos.class.php). This deserialization can be triggered by crafted input via GET (...

CVE-2024-54136

Summary: ClipBucket-v5 (versions up to 5.5.1 Revision 199) is affected by a PHP deserialization vulnerability in upload/upload.php where user input via the collection parameter is passed to unserialize, enabling crafted PHP serialized objects and gadget chains. Impact (as stated): allows arbitrar...

PT-2024-36064 · Unknown · Clipbucket-V5

Name of the Vulnerable Software and Affected Versions: ClipBucket-v5 versions 5.5.1 Revision 199 and below Description: The issue exists in the upload/upload.php file where user-supplied input via the collection get parameter is directly provided to the unserialize function, allowing an adversary...

CVE-2024-39219

An issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with Administrator privileges to upload an earlier firmware version, exposing the device to previously patched vulnerabilities...

PT-2024-28393 · Aginode · Aginode Gigaswitch V5

Name of the Vulnerable Software and Affected Versions: Aginode GigaSwitch V5 versions prior to 7.06G Description: The issue allows authenticated attackers with Administrator privileges to upload an earlier firmware version, exposing the device to previously patched vulnerabilities. This can be do...

CVE-2024-39219

CVE-2024-39219 (Aginode GigaSwitch V5) : RH advisories describe an issue where, before version 7.06G, authenticated administrators can upload an older firmware image, reintroducing previously patched vulnerabilities in the device. The vulnerability affects Aginode GigaSwitch V5 and is triggered b...

[SECURITY] Fedora 40 Update: krb5-1.21.3-2.fc40

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 41 Update: krb5-1.21.3-3.fc41

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 40 Update: podman-tui-1.2.3-1.fc40

podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

[SECURITY] Fedora 39 Update: podman-tui-1.2.3-1.fc39

podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

[SECURITY] Fedora 41 Update: podman-tui-1.2.3-1.fc41

podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...

SUSE CVE-2024-49965

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2readblocks Patch series "Misc fixes for ocfs2readblocks", v5. This series contains 2 fixes for ocfs2readblocks. The first patch fix the issue reported by syzbot, which detects bad unlock...

PT-2024-16007 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical vulnerability was found in ESAFENET CDG, affecting the actionUpdateEncryptPolicyEdit function of the /com/esafenet/servlet/policy/EncryptPolicyService.java file. The manipulation of the...

CVE-2024-9560

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. The manipulation of the argument id leads to sql injection. The attack may be launched remotel...