Archive
5 May 2024
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Medium 4.7
Ruijie RG-UAC static_route_add_ipv6.php os command injection
A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/static_route_add_ipv6.php. The manipulation of the argument text_prefixlen/text_gateway/dev…
-
Medium 4.7
Ruijie RG-UAC ip_addr_edit_commit.php os command injection
A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads t…
-
Medium 4.7
Ruijie RG-UAC ip_addr_add_commit.php os command injection
A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ip_addr_add_commit.php. The manipulation of the argument prelen/ethname leads to os command injection. I…
-
Medium 4.7
Ruijie RG-UAC commit.php os command injection
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peer_ip/local_ip leads t…
-
Medium 4.7
Ruijie RG-UAC dhcp_relay_commit.php os command injection
A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp_relay_commit.php. The manipulation of the argument interface_from leads to os c…
-
Medium 4.7
Ruijie RG-UAC dhcp_client_commit.php os command injection
A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is an unknown function of the file /view/dhcp/dhcpClient/dhcp_client_commit.php. The manipulation of the argument ifName leads to os command injection. It is possi…
-
Medium 4.7
Ruijie RG-UAC commit.php os command injection
A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The…
-
Medium 6.3
SourceCodester Prison Management System edit-photo.php unrestricted upload
A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Employee/edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. …
-
Medium 6.1
MediaWiki UnlinkedWikibase Cross-site Scripting vulnerability
An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. XSS can occur through an interface message. Error messages (in the $err var) are not escaped before being passed to Html::raw…
-
Medium 4.8
Nebari prints temporary Keycloak root password
Nebari through 2024.4.1 prints the temporary Keycloak root password.
-
Medium 6.8
Avantra Server 24.x before 24.0.7 and 24.1.x before 24.1.1 mishandles the security of dashboards, aka XAN-5367. If a us…
-
Medium 5.3
FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.
-
Medium 4.3
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
-
Medium 5.1
In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the con…
-
Medium 5.3
Ryu Infinite Loop vulnerability
OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via action.len=0.
-
Medium 5.3
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.