3620 matches found
CVE-2024-42737
The CVE-2024-42737 vulnerability affects TOTOLINK X5000r (version 9.1.0cu.2350_b20230313) where the CGI endpoint /cgi-bin/cstecgi.cgi contains an OS command injection in the delBlacklist function. An attacker can send a malicious packet to execute arbitrary commands on the affected device. The is...
Security Advisory: Ivanti Virtual Traffic Manager (vTM ) (CVE-2024-7593)
Created Date 12-Aug-2024 18:40:06...
BELL-CVE-2024-42155
Bulletin has no description...
BELL-CVE-2024-41063
Bulletin has no description...
Important: java-11-amazon-corretto
Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.1...
CVE-2024-40543
PublicCMS v4.0.202302.e was discovered to contain a Server-Side Request Forgery SSRF via the component /admin/ueditor?action=catchimage...
CVE-2024-40034
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...
CVE-2024-27709
SQL Injection vulnerability in Eskooly Web Product v.3.0 allows a remote attacker to execute arbitrary code via the searchby parameter of the allstudents.php component and the id parameter of the requestmanager.php component...
CVE-2024-39313 toy-blog Improper Input Validation vulnerability
toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, articles with private visibility can be read if the reader does not set credentials for the request. Users should upgrade to 0.6.1 or later to receive a patch. No known workaroun...
Exploit for CVE-2023-6553
CVE-2023-6553 Due to a incorrect include statement in the "...
[SECURITY] [DLA 3848-1] org-mode security update
Debian LTS Advisory DLA-3848-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton June 29, 2024 https://wiki.debian.org/LTS Package : org-mode Version : org-mode 9.1.14+dfsg-3+deb10u3 CVE ID : CVE-2024-39331 Debian Bug : 1074136 A vulnerability was discovered in Org-mod...
CVE-2024-39209
The CVE-2024-39209 entry concerns luci-app-sms-tool v1.9-6, which has a command injection vulnerability exploitable via the score parameter. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists). Affected component: luci-app-sms-tool, version 1.9-6. Root cause: command injection...
BELL-CVE-2024-38582
Bulletin has no description...
BELL-CVE-2024-38585
Bulletin has no description...
CVE-2024-38538 net: bridge: xmit: make sure we have at least eth header len bytes
In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value1 error in bridge device's xmit path by sending a short less than ETHHLEN bytes skb. To fix it check if we can actually pull that...
CVE-2024-35751 WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad snippets: from n/a through 2.4.10...
CVE-2023-49441
dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery...
BELL-CVE-2024-36946
Bulletin has no description...