HP OfficeJet Pro 安全漏洞

HP OfficeJet Pro is an all-in-one printer from Hewlett-Packard HP. A security vulnerability exists in HP OfficeJet Pro that originates from a possible denial-of-service attack when an incorrect eSCL URL GET request is used...

PT-2024-8353 · Unknown · Mipc Camera

Name of the Vulnerable Software and Affected Versions: MIPC Camera firmware versions prior to 5.4.1.240424171021 Description: The issue is related to an OS command injection vulnerability in the ccm debug component. This vulnerability can be exploited by sending a crafted HTTP request, allowing a...

The vulnerability of the Jenkins HTML Publisher plugin relates to incorrect restrictions on the path to the restricted catalog, allowing attackers to read arbitrary files.

The vulnerability of the Jenkins HTML Publisher plugin is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created HTTP request...

Fortinet FortiOS 缓冲区错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A buffer overflow vulnerability...

CVE-2022-43890

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 240453...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a path traversal...

aiohttp: HTTP request modification

A flaw was found in the python-aiohttp package. This issue could allow a remote attacker to modify an existing HTTP request or create a new request that could have minor confidentiality or integrity impacts...

Red Hat FreeIPA Input Validation Error Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The product provides identity management, policy management, and audit management IPA capabilities for Linux and Unix computer networks. A security vulnerability exists in Red Hat FreeIPA that originates...

The vulnerability of microprogramming software for base stations (BS) in wireless communication with Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 allows a intruder to execute arbitrary code.

The vulnerability of microprogramming software for base stations BS in wireless communication systems of Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to execu...

TYPO3 Information Disclosure Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. An information disclosure vulnerability exists in TYPO3 versions 8.0.0-8.7.56, 9.0.0-9.5.45, 10.0.0-10.4.42, 11.0.0-11.5.34, 12.0.0-12.4.10, and 13.0.0, which stems from the...

Apache bRPC 环境问题漏洞

Apache bRPC is the United States Apache Apache Foundation's industrial-grade RPC framework for building reliable and high-performance services. Apache bRPC suffers from an environmental issue vulnerability that stems from the presence of an HTTP server request smuggling vulnerability that can be...

CVE-2023-42664

A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTT...

TP-LINK ER7206 操作系统命令注入漏洞

The TP-LINK ER7206 is a multi-function Gigabit router from China P&L TP-LINK. An operating system command injection vulnerability exists in the TP-LINK ER7206 version 1.3.0 build 20230322 Rel.70591, which stems from a specially crafted HTTP request that could lead to arbitrary command injection. ...

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools used in production lines allows a intruder to gain unauthorized access to the database.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

Google Chrome 安全漏洞

Google Chrome is a popular web browser. Google Chrome Skia suffers from a heap overflow vulnerability that can be exploited by a remote attacker to submit a special WEB request that can be tricked into being parsed by the user, which can crash the application or can be used to execute arbitrary...

PT-2024-15944

Name of the Vulnerable Software and Affected Versions Gradio affected versions not specified Description A local file include could be remotely triggered due to a vulnerable user-supplied JSON value in an API request. This issue allows for the potential inclusion of local files, which could lead ...

The vulnerability of the Rapid SCADA system, related to incorrect restrictions on the name of the path to the restricted access catalog, allows a intruder to execute arbitrary code.

The vulnerability of the SCADA system Rapid SCADA is related to incorrect restrictions on the path name to the restricted access catalog when extracting files from archives. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP reques...

OESA-2024-1116 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker...

CVE-2023-39611

The CVE-2023-39611 entry concerns Software FX Chart FX 7 (version 7.0.4962.20829). The vulnerability allows an attacker to enumerate and read files on the local filesystem by sending crafted web requests, indicating a local file disclosure issue in the web-facing functionality. The root cause and...

Software FX Chart FX Security Vulnerability

Software FX Chart FX is a data visualization library from Software FX that allows developers to create a variety of charts. A security vulnerability exists in Software FX Chart FX version 7 7.0.4962.20829, which originates from a vulnerability that allows an attacker to enumerate and read files o...