CVE-2024-57784

An issue in the component /php/scriptuploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 is susceptible to a local file inclusion (LFI) vulnerability within the amc_uploads.php component. The root cause is identified as the use of incorrectly-resolved names or references (CWE-706). An authenticated attacker could exploit this to read arbitrary files fro...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amcuploads.php...

CVE-2024-57785

Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amcuploads.php...

Zenitel AlphaWeb XE 安全漏洞

Zenitel AlphaWeb XE is an embedded web server from Zenitel running on AlphaCom XE. A security vulnerability exists in Zenitel AlphaWeb XE version v11.2.3.10, which stems from a local file inclusion vulnerability discovered via the component amcuploads.php...

PT-2025-3571 · Zenitel · Zenitel Alphaweb Xe

Name of the Vulnerable Software and Affected Versions: Zenitel AlphaWeb XE version 11.2.3.10 Description: An issue in the component /php/script uploads.php allows attackers to execute a directory traversal. Recommendations: For Zenitel AlphaWeb XE version 11.2.3.10, consider restricting access to...

CVE-2024-57784

The Zenitel AlphaWeb XE version v11.2.3.10 is vulnerable to an authenticated directory traversal issue within the /php/script_uploads.php component. This vulnerability allows an attacker to perform directory traversal to read arbitrary files on the application service. Proof-of-concept (PoC) code...

CVE-2024-57784: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component /php/scriptuploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal...

DEBIAN-CVE-2024-57844

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

UBUNTU-CVE-2024-57844

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

CVE-2024-57844: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

PT-2025-25811

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the drm/xe/vf module, where VFs Virtual Functions need to communicate with the GuC Graphics Unit Controller to...

CVE-2024-53522

Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components. This allows attackers to access sensitive information...

Cisco Catalyst SD-WAN Routers DoS (cisco-sa-sdwan-utd-dos-hDATqxs)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense UTD component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote...

Bangkok Medical Software HOSxP XE 安全特征问题漏洞

Bangkok Medical Software HOSxP XE is a hospital information system software from Bangkok Medical Software, Thailand. A security vulnerability exists in Bangkok Medical Software HOSxP XE version v4.64.11.3, which originates from the inclusion of hardcoding in the HOSxPXE4.exe and HOS-WIN32.INI...

PT-2025-2964

Name of the Vulnerable Software and Affected Versions Bangkok Medical Software HOSxP XE version 4.64.11.3 Description The issue is related to a hardcoded IDEA Key-IV pair found in the HOSxPXE4.exe and HOS-WIN32.INI components. This hardcoded pair allows attackers to access sensitive information...

CVE-2024-53522: Insufficient Entropy

Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components. This allows attackers to access sensitive information...

Cisco IOS Software and IOS XE Software Access Control Error Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An access control error vulnerability exists in the Simple Network Management Protocol SNMP IPv4 access control list feature of Cisco IOS Software and IOS XE Software, which stems from the program not...

Cisco IOS XE Software SD Access Fabric Edge Node DoS (cisco-sa-ios-xe-sda-edge-dos-MBcbG9k)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access SD- Access fabric edge nodes could allow an unauthenticated, remote attacker to cause high CPU utilizati...

PT-2025-49793

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists within the kernel’s DRM/XE subsystem, specifically in the xe gem fault function, which can lead to an oops kernel panic during the execution of core hotunplug tests. This...