Cleo < 5.8.0.24 Unrestricted File Upload

Cleo Harmony prior to 5.8.0.24, VLTrader prior to 5.8.0.24 and LexiCom prior to 5.8.0.24 are affected by a vulnerability allowing an unauthenticated attacker to upload an arbitrary file that could lead to remote code execution. No source data...

Cleo LexiCom < 5.8.0.24 Unauthenticated Arbitrary Command Execution (CVE-2024-55956)

The version of Cleo LexiCom running on the remote host is prior to 5.8.0.24. It is, therefore, affected by an unauthenticated arbitrary command execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...