80 matches found
CVE-2021-39279
Certain MOXA devices allow Authenticated Command Injection via /forms/webimportTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3,...
CVE-2021-39278
Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3...
CVE-2024-35420
wac commit 385e1 was discovered to contain a heap overflow...
CVE-2024-35418
wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...
CVE-2024-35410
wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...
CVE-2024-35419
wac commit 385e1 was discovered to contain a heap overflow via the loadmodule function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...
CVE-2024-35419
CVE-2024-35419 affects the Wac project (commit 385e1). A heap overflow exists in the load_module function in /wac-asan/wa.c, enabling a DoS via a crafted WebAssembly (wasm) file. Public references from Red Hat, NVD, CVE lists, CNNVD and PT-Security corroborate the issue. The Red Hat entry and oth...
CVE-2024-35420
wac commit 385e1 was discovered to contain a heap overflow...
CVE-2024-35410
The CVE-2024-35410 issue affects wac (commit 385e1) and is caused by a heap overflow in the interpret function (source file: /wac-asan/wa.c). Exploitation leads to Denial of Service via a specially crafted WebAssembly (wasm) file. Connected records confirm the same root cause across multiple feed...
CVE-2024-35418
wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...
CVE-2024-35418
wac commit 385e1 was discovered to contain a heap overflow via the setupcall function at /wac-asan/wa.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted wasm file...
CVE-2024-35418
CVE-2024-35418 affects the wac project (WebAssembly in C). A heap overflow in the setup_call function (wa.c) allows an attacker to cause a Denial of Service via a crafted wasm file. Impact: CVSS v3.1 base score 6.2 (Medium); vector LOCAL, no privileges, no user interaction; availability impact HI...
CVE-2024-35420
wac commit 385e1 was discovered to contain a heap overflow...
CVE-2024-35420
The CVE-2024-35420 entry concerns wac, a minimal WebAssembly interpreter written in C. Connected sources confirm a heap overflow in commit 385e1. The vulnerability affects the wac project as described, but the provided documents do not specify affected versions beyond commit 385e1, nor do they de...
PT-2024-26486 · Wac · Wac
Name of the Vulnerable Software and Affected Versions: wac version 385e1 Description: A heap overflow issue was discovered in the setup call function at /wac-asan/wa.c, allowing attackers to cause a Denial of Service DoS via a crafted wasm file. The issue is related to the setup call function...
ILIAS < 7.22, 8.x < 8.2 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
Moxa OnCell Arbitrary OS Commands Execution (CVE-2016-8363)
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...
MAL-2023-668 Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607c4692c6a631f5514a914240622977d22fb3fbc467f6bdc0b132532b3454b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
