CVE-2024-5581

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the unzipFile method. The...

CVE-2024-30372

Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-51634

NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this...

OpenText iManager 安全漏洞

OpenText iManager is a web-based management tool from OpenText Canada. A security vulnerability exists in OpenText iManager version 3.2.4.0000, which stems from a possible incorrect input validation vulnerability in iManager...

LogSign Unified SecOps Platform 操作系统命令注入漏洞

Logsign Unified SecOps Platform is a security operations platform from Logsign, Inc. for collecting, storing, analyzing, and responding to security data from a variety of sources. An operating system command injection vulnerability exists in LogSign Unified SecOps Platform versions prior to 6.4.8...

CLSA-2024-1732194710 httpd: Fix of 2 CVEs

CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to...

PT-2024-17036 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this, where the target must visit a malicious...

The vulnerability of the mvm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mvm component in the Linux operating system’s kernel is related to improper validation of input data in the iwlmvmgetsecflags function. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003 ipposition.asp function. The vulnerability stems from the ippositionasp function failing to correctly validate the length and size of the input data, which can be...

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

The vulnerability of the Zelio Soft 2 software for intelligent relays, related to incorrect validation of entered data, allows a perpetrator to cause service interruptions.

The vulnerability of the Zelio Soft 2 software for intelligent relays from Zelio Logic relates to incorrect validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure by loading a specially created project file...

The vulnerability of the web-based interface for controlling microprogrammed software in the Eltex MES5324 switch lies in insufficient validation of input data. This allows a perpetrator to trigger a reboot of the switch.

The vulnerability of the web interface for controlling microprogrammed software in the Eltex MES5324 switch lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a restart of the switch by sending specially crafted HTTP...

Palo Alto Networks PAN-OS 信任管理问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A trust management issue vulnerability exists in Palo Alto Networks PAN-OS that stems from the presence of an incorrect certificate validation vulnerability, which allows an...

CVE-2024-32485

Improper Input Validation in some IntelR VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable denial of service via local access...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs kernel component in the Linux operating system is related to incorrect input validation in the fs/f2fs/f2fs.h file. Exploiting this vulnerability can allow an attacker to cause a system failure...

Siemens多款产品 安全漏洞

SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 are industrial routers. An input validation error vulnerability exists in multiple Siemens products, which can be exploited by an attacker to execute arbitrary code on the device...

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from incorrect input validation. An attacker exploiting the vulnerability could provide specially crafted pointers that could lead to arbitrary code execution...

PT-2024-19132 · Unknown · Npu Driver

Name of the Vulnerable Software and Affected Versions: NPU driver affected versions not specified Description: The issue is related to improper input validation in the NPU driver, which could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution...

Improper Input Validation

Overview ansible-core is an a radically simple IT automation system. It handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex changes like zero-downtime rolling updates with load...

buildah: Buildah allows arbitrary directory mount

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a RUN instruction in a Container file to mount an arbitrary directory from the host read/write into the container as long as those files can...