Archive
March 2024
Vulnerabilities first published in this month (UTC), newest first.
3,317 results · Feed
-
High 8.8
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function.
-
Medium 4.3
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedStartTime parameter from setSchedWifi functio…
-
Medium 4.3
Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement funct…
-
Medium 6.5
Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.
-
High 8.8
Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter.
-
High 8.0
Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.
-
Medium 5.7
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the list1 parameter from fromDhcpListClient function.
-
High 8.0
Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in the fromAddressNat func…
-
High 8.0
Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the entrys parameter from fromAddressNat function.
-
High 7.2
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could po…
-
High 7.2
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could po…
-
Medium 5.5
Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high p…
-
Medium 5.3
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A re…
-
Medium 5.9
Dell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic algorithm vulnerabilit…
-
High 8.8
Pcp: exposure of the redis server backend allows remote command execution via pmproxy
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pm…
-
High 7.3
Cockpit: command injection when deleting a sosreport with a crafted name
A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer.
-
Medium 6.0
Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability…
-
Medium 6.0
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability…
-
High 7.3
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of sensitive information vulne…
-
Medium 6.0
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an improper privilege management vulnerability. A local…
-
High 7.9
Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vul…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, ma…
-
Medium 5.5
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …
-
High 8.3CVE-2023-42931 Public exploit
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mon…
-
High 8.6
A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventu…
-
Medium 5.5
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS V…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mo…
-
High 8.8
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sess…
-
Medium 5.5
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.…
-
Medium 5.5
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macO…
-
High 7.0
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventur…
-
High 7.5
This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16…
-
High 7.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macO…
-
Medium 4.1
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing t…
-
Medium 5.9
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector
-
Medium 4.6CVE-2024-31138 EPSS 75%
In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings
-
Medium 6.8
In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration
-
High 7.4
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter
-
Medium 6.5
In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users …