CVE-2024-4196

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

CVE-2024-4196 Avaya IP Office Web Control RCE Vulnerability

An improper input validation vulnerability was discovered in Avaya IP Office that could allow remote command or code execution via a specially crafted web request to the Web Control component. Affected versions include all versions prior to 11.1.3.1...

Avaya IP Office Security Breach

Avaya IP Office is a small business phone system from Avaya USA. A security vulnerability exists in Avaya IP Office versions prior to 11.1.3.1, which originated from a vulnerability that allows remote commands or code to be executed via a specially crafted web request to the web control component...

Multiple BAS-IP Products Security Breach

BAS-IP AV Series and others are products of BAS-IP Corporation.BAS-IP AV Series is a series of smart personal entrance panels.BAS-IP AA Series is a series of smart apartment entrance panels.BAS-IP BA Series is a series of visual intercom outdoor entrance panels. A security vulnerability exists in...

The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage arises from improper verification of the return value of methods or functions. This allows a malicious actor to trigger a service failure.

The vulnerability of the microprogramming software used in devices for remote control of lighting and energy consumption in Schneider Electric’s Sage products is related to improper verification of the return value of certain methods or functions. Exploiting this vulnerability could allow a...

Vulnerability of the web interface for operating system management software FortiOS and the proxy server FortiProxy, which allows for the execution of arbitrary code.

The vulnerability in the web management interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute...

Anonshop Security Breach

Anonshop is an online shopping system from Anon shop open source. A security vulnerability exists in Anonshop. An attacker exploits the vulnerability to send an error message via a specially crafted HTTP request...

PT-2024-26961 · Awkblog · Awkblog

Name of the Vulnerable Software and Affected Versions: awkblog versions 0.0.1 and earlier Description: A remote unauthenticated attacker can execute an arbitrary OS command with the privileges of the affected product by sending a specially crafted HTTP request. This issue allows for the execution...

PT-2024-4203 · Schneider Electric · Schneider Electric Sage

Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage affected versions not specified Description: The issue is related to an out-of-bounds read vulnerability in the web interface of the Schneider Electric Sage software for remote lighting and energy management devices...

PT-2024-3954

Name of the Vulnerable Software and Affected Versions Fortinet FortiWebManager versions 6.0.2, 6.2.3 through 6.2.4, 6.3.0, 7.0.0 through 7.0.4, and 7.2.0 Description The issue is related to an improper authorization in the HTTP Request Handler component of Fortinet FortiWebManager, which can be...

Ping Identity PingAccess Security Vulnerability

Ping Identity PingAccess is a centralized access security solution with a comprehensive policy engine from Ping Identity, Inc. It is used to provide secure access to applications and Api's up to the Url level and ensures that only authorized users can access the resources they need. A security...

PT-2024-13350 · Mercusys · Mercusys Mw325R

Name of the Vulnerable Software and Affected Versions: Mercusys MW325R EU V3 version 1.11.0 221019 Description: An issue allows a WAN attacker to make the admin interface unreachable via an unauthenticated HTTP request. The verification of user data does not occur, and the web server remains...

OpenText Dimensions RM 安全漏洞

OpenText Dimensions RM is a full-featured requirements management solution from OpenText Canada. A security vulnerability exists in OpenText Dimensions RM. An authenticated attacker exploiting this vulnerability could escalate their privileges to another user's privileges via an HTTP request...

PT-2024-35094 · Opentext · Opentext Dimensions Rm

Name of the Vulnerable Software and Affected Versions: OpenText Dimensions RM affected versions not specified Description: The issue allows an authenticated user to escalate their privileges to those of another user via an HTTP request. Recommendations: At the moment, there is no information abou...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted HTTP request...

PT-2024-32874 · WordPress · Cost Calculator Builder

Name of the Vulnerable Software and Affected Versions: Cost Calculator Builder Pro plugin for WordPress versions up to 3.1.72 Description: The issue allows authenticated attackers with subscriber-level access and above to make web requests to arbitrary locations originating from the web...

CVE-2024-3286

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request...

CVE-2024-3286

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request...

CVE-2024-3286

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request...

CVE-2024-3286

Summary (CVE-2024-3286): A buffer overflow vulnerability affecting certain Lenovo printers allows an unauthenticated user to trigger a device restart by sending a specially crafted web request. This is reported across multiple sources in the connected documents, including original CVE records and...