Baza CVE

Brak zwolnienia zasobów w Erlang/OTP inets httpd pozwala na zdalne zablokowanie usługi.

Brak obsługi kontynuacji nagłówków w httpd umożliwia ataki typu request smuggling.

Podatność w Erlang/OTP httpd pozwala zdalnemu atakującemu na odczyt plików z chronionego katalogu.

Błąd w Erlang/OTP inets httpd pozwala atakującemu na zdalne zablokowanie usługi.

Brak limitów połączeń w Erlang/OTP inets httpd pozwala na zdalne zablokowanie serwera.

Włączenie funkcjonalności z niezaufanego źródła w Dell PowerStore pozwala na wykonanie kodu jako root.

Brak limitu na rozmiar nagłówków w httpc pozwala na wyczerpanie pamięci przez złośliwy serwer.

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16.

Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16.

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16.

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a…

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault (MNRF), requiring a power cycle to recover

A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service URLs allows a bypass of the denylist introduced to mitigate CVE-2018-1000130. The proxy accepts a `target.url` value from a Jolokia POST request and passes it to `JMXServiceURL`…

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a  restart of the service to recover.

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover.

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a…

Awaria mechanizmu ochrony w Dell PowerStore pozwala na eskalację uprawnień przez uwierzytelnionego użytkownika.

Nieautoryzowane zapisywanie zdalnych plików Python w Hugging Face Transformers może prowadzić do niebezpiecznych plików na dysku.

Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the local device and, on a master, fan out reboot commands to mesh slaves via sending a crafted MQTT message to the cs_broker component.

Wstrzyknięcie poleceń w Dell PowerStore pozwala uwierzytelnionemu użytkownikowi na wykonanie dowolnych komend.

Wstrzyknięcie kodu w Dell PowerStore pozwala użytkownikowi na wykonanie kodu z uprawnieniami roota.

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validation of multi-file upload chunk state in the `GFAsyncUpload::upload()` function, where public form state URL hashes can be reused as chunk…

A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows…

A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice…