Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,829 results · page 290 of 777
Dec 6, 2024Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafCVE-2024-41648 · Other software · Openrobotics · reported by MITRECritical 9.8
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafCVE-2024-41647 · Other software · Openrobotics · reported by MITRECritical 9.8
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_mppi_controller.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafCVE-2024-41646 · Other software · Openrobotics · reported by MITRECritical 9.8
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_dwb_controller.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafCVE-2024-41645 · Other software · Openrobotics · reported by MITRECritical 9.8
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2__amcl.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyCVE-2024-41644 · Other software · Openrobotics · reported by MITRECritical 9.8
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_ component.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38927 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter `/amcl do_beamskip`.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38926 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter `/amcl z_short`.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38925 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_max` .
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38924 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl laser_model_type` .
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38923 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl odom_frame_id` .
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process.CVE-2024-38922 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted message to the component /initialpose.
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38921 · Other software · Openrobotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_rand ` .
- Product
- Robot Operating System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT meCVE-2024-52324 · Other software · Ruijie · reported by ics-cert@hq.dhs.govCritical 9.2
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands.
- Product
- Reyee OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attCVE-2024-48874 · Other software · Ruijie · reported by ics-cert@hq.dhs.govCritical 9.3
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud metadata services.
- Product
- Reyee OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics.CVE-2024-46874 · Other software · Ruijie · reported by ics-cert@hq.dhs.govCritical 9.2
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to other devices on behalf of Ruijie's cloud.
- Product
- Reyee OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024The affected product is vulnerable to a command injection.CVE-2024-52320 · Other software · Planet Technology · reported by ics-cert@hq.dhs.govCritical 9.3
The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution.
- Product
- Planet WGS-804HPT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024The affected product is vulnerable to a stack-based buffer overflow.CVE-2024-48871 · Other software · Planet Technology · reported by ics-cert@hq.dhs.govCritical 9.3
The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution.
- Product
- Planet WGS-804HPT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication vCVE-2024-47547 · Other software · Ruijie · reported by ics-cert@hq.dhs.govCritical 9.3
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaves authentication vulnerable to brute force attacks.
- Product
- Reyee OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024openwrt/asu is an image on demand server for OpenWrt based distributions.CVE-2024-54143 · Other software · openwrt · reported by GitHubCritical 9.3
openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-256 hashes to only 12 characters. This significantly reduces entropy, making it feasible for an attacker to generate collisions. By exploiting this, a previously built malicious image can be served in place of a legitimate one, allowing the attacker to "poison" the artifact cache and deliver compromised images to unsuspecting users. This can be combined with other attacks, such as a command injection in Imagebuilder that allows malicious users to inject arbitrary commands into the build process, resulting in the production of malicious firmware images signed with the legitimate build key. This has been patched with 920c8a1.
- Product
- asu
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024A SQL injection vulnerability has been reported to affect QuRouter.CVE-2024-50389 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twCritical 9.5
A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later
- Product
- QuRouter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync.CVE-2024-50388 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twCritical 9.5
An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later
- Product
- HBS 3 Hybrid Backup Sync
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024A SQL injection vulnerability has been reported to affect several QNAP operating system versions.CVE-2024-50387 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twCritical 10
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: SMB Service 4.15.002 and later SMB Service h4.15.002 and later
- Product
- SMB Service
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.CVE-2024-54750 · Other software · ui · reported by MITRECritical 9.8
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before.
- Product
- u6-lr_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcolorful-meadow-5b9.notion.site
Dec 6, 2024WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.CVE-2024-54747 · Other software · wavlink · reported by MITRECritical 9.8
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
- Product
- wn531p3_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcolorful-meadow-5b9.notion.sitedocs.wavlink.xyz
Dec 6, 2024WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.CVE-2024-54745 · Other software · Wavlink · reported by MITRECritical 9.8
WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
- Product
- Wn701ae Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcolorful-meadow-5b9.notion.sitedocs.wavlink.xyz
Dec 6, 2024ClipBucket V5 provides open source video hosting with PHP.CVE-2024-54136 · Other software · MacWarrior · reported by GitHubCritical 9.8
ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200.
- Product
- clipbucket-v5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024ClipBucket V5 provides open source video hosting with PHP.CVE-2024-54135 · Other software · MacWarrior · reported by GitHubCritical 9.8
ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/photo_upload.php within the decode_key function. User inputs were supplied to this function without sanitization via collection GET parameter and photoIDS POST parameter respectively. The decode_key function invokes PHP unserialize function as defined in upload/includes/classes/photos.class.php. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200.
- Product
- clipbucket-v5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024Revy: Unrestricted Upload of File with Dangerous TypeCVE-2024-54214 · WordPress plugins & themes · reported by PatchstackCritical 10
Unrestricted Upload of File with Dangerous Type vulnerability in roninwp Revy revy allows Upload a Web Shell to a Web Server.This issue affects Revy: from n/a through <= 1.18.
- Product
- Revy
- Affected
- up to 1.18
- What to do
- Affects up to 1.18. Update Revy to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 6, 2024Simple User Registration: Missing AuthorizationCVE-2024-53810 · WordPress plugins & themes · reported by PatchstackCritical 9.1
Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Simple User Registration: from n/a through <= 5.5.
- Product
- Simple User Registration
- Affected
- up to 5.5
- What to do
- Affects up to 5.5. Update Simple User Registration to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 6, 2024A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05).CVE-2024-52335 · Other software · Siemens · reported by productcert@siemens.comCritical 9.3
A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL commands to compromise the whole database.
- Product
- syngo.plaza VB30E
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiemens-healthineers.com
Dec 6, 2024s2Member: Improper Control of Generation of Code ('Code Injection')CVE-2024-51815 · WordPress plugins & themes · reported by PatchstackCritical 9
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114.
- Product
- s2Member
- Affected
- up to 241114
- What to do
- Affects up to 241114. Update s2Member to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 6, 2024WordPress Auction: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2024-51615 · WordPress plugins & themes · reported by PatchstackCritical 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress Auction Plugin wp-auctions allows SQL Injection.This issue affects WordPress Auction Plugin: from n/a through <= 3.7.
- Product
- WordPress Auction
- Affected
- up to 3.7
- What to do
- Affects up to 3.7. Update WordPress Auction to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 6, 2024The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels.CVE-2024-10773 · Other software · SICK AG · reported by psirt@sick.deCritical 9
The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This means that an attacker can log in with the hidden user levels and gain full access to the device.
- Product
- SICK InspectorP61x
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2024An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.CVE-2024-53908 · Other software · djangoproject · reported by MITRECritical 9.8
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)
- Product
- django
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.djangoproject.comgroups.google.com
Dec 6, 2024SV100 Companion: Unauthorized modification of data that can lead to privilege escalationCVE-2024-12155 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. CVE-2024-54229 may be a duplicate of this issue.
- Product
- SV100 Companion
- Affected
- up to 2.0.02
- What to do
- Affects up to 2.0.02. Update SV100 Companion to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Dec 5, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.CVE-2024-38920 · Other software · open_robotics · reported by MITRECritical 9.1
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_beams` .
- Product
- nav2_humble
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process.CVE-2024-37863 · Other software · open_robotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
- Product
- robotics_operating_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process.CVE-2024-37861 · Other software · open_robotics · reported by MITRECritical 9.8
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
- Product
- ros2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows.CVE-2018-9388 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8
In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. These could lead to escalation of privilege.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.CVE-2024-53442 · Other software · reported by MITRECritical 9.8
whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record1d8.github.iogithub.com
Dec 5, 2024DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerabilityCVE-2024-41579 · Other software · reported by MITRECritical 9.8
DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause a SQL injection vulnerability
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Dec 5, 2024Oxide control plane software before 5 allows SSRF.CVE-2023-50913 · Other software · reported by MITRECritical 9.1
Oxide control plane software before 5 allows SSRF.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.oxide.computeroxide.computer
Dec 5, 2024STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface.CVE-2023-48010 · Other software · reported by MITRECritical 9.8
STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN).CVE-2024-54130 · Other software · nasa-jpl · reported by GitHubCritical 9.2
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s.
- Product
- ION-DTN
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN).CVE-2024-54129 · Other software · nasa-jpl · reported by GitHubCritical 9.2
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.
- Product
- ION-DTN
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.CVE-2024-6516 · Other software · ABB · reported by cybersecurity@ch.abb.comCritical 9.3
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
- Product
- ASPECT-Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installeCVE-2024-51555 · Other software · ABB · reported by cybersecurity@ch.abb.comCritical 9.3
Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02
- Product
- ASPECT-Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials.CVE-2024-51551 · Other software · ABB · reported by cybersecurity@ch.abb.comCritical 9.3
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02
- Product
- ASPECT-Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device.CVE-2024-51550 · Other software · ABB · reported by cybersecurity@ch.abb.comCritical 9.3
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
- Product
- ASPECT-Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2024Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.CVE-2024-51549 · Other software · ABB · reported by cybersecurity@ch.abb.comCritical 9.3
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
- Product
- ASPECT-Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.