The vulnerability of the GetValue function in the web interface of Supermicro’s BMC IPMI servers allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the web interface of Supermicro IPMI servers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2024-20522

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20523

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20519

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20515

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...

CVE-2024-20515

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...

CVE-2024-20393

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists because the web-based management interfa...

CVE-2024-20432

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to improper user authorization and insufficient...

CVE-2024-20517

CVE-2024-20517 affects Cisco Small Business RV042, RV042G, RV320, and RV325 routers. A vulnerability in the web-based management interface allows an authenticated Administrator to trigger an unexpected device reload, causing DoS. Root cause: improper validation of user input in incoming HTTP pack...

CVE-2024-20516

CVE-2024-20516 affects Cisco Small Business RV042, RV042G, RV320, and RV325 routers. The issue stems from improper validation of user input in incoming HTTP packets to the web-based management interface, exploitable by an authenticated Administrator to trigger an unexpected reload and DoS (per CV...

CVE-2024-20515 Cisco Identity Services Engine Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...

CVE-2024-20470 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this vulnerability, the attacker must have...

Cisco Small Business多款产品 安全漏洞

The Cisco Small Business RV320 and Cisco Small Business RV325 are both VPN routers from Cisco. A security vulnerability exists in various Cisco Small Business products that stems from improper validation of user input in the Web management interface. The vulnerability allows a remote attacker to...

Cisco Small Business 安全漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in Cisco Small Business that stems from the web-based management interface not adequately validating user-supplied input. This allows an authenticated remote attacker to elevate privileges and execute arbitrary...

PT-2024-22227 · Sharp +1 · Multiple Mfps

Name of the Vulnerable Software and Affected Versions: Affected devices affected versions not specified Description: The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow. This occurs when a too long character string is given to the...

Cisco Small Business多款产品 安全漏洞

The Cisco Small Business RV340 and the Cisco Small Business RV345 are both products of Cisco, Inc.The Cisco Small Business RV340 is a router. A hardware device that connects two or more networks and acts as a gateway between networks.The Cisco Small Business RV345 is a Cisco router. A security...

PT-2024-7434 · Draytek · Draytek Vigor310

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor310 versions through 4.3.2.6 Description: The issue is related to a buffer overflow vulnerability in the web interface of DrayTek Vigor routers, caused by improper handling of input data. This can be exploited by a remote attacke...

PT-2024-7433 · Draytek · Draytek Vigor310

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor310 versions up to 4.3.2.6 Description: The issue is related to a buffer overflow vulnerability in the web interface of DrayTek Vigor routers, caused by a lack of size checking on input data. This can be exploited by a remote...

PT-2024-6633 · Cisco · Cisco Small Business Rv340W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: The issue is related to the web-based management interface of the affected devices, which discloses sensitive...

Cisco Nexus Dashboard 安全漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A security vulnerability exists in Cisco Nexus Dashboard that stems from insufficient authorization controls on an affected REST API endpoint. Allowing an authenticated...