Vuldb Updates

A vulnerability was found in Netgear FVS336Gv3 and FVS336Gv2 up to 4.3. It has been classified as critical. Affected by this vulnerability is the function backup_configuration of the component Telnet. The manipulation leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2024-23690. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as critical, was found in Commvault up to 11.32.59/11.34.33/11.36.7 on Windows. Impacted is an unknown function. The manipulation results in improper privilege management. This vulnerability was named CVE-2024-13975. The attack needs to be approached locally. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Commvault up to 11.20.201/11.28.123/11.32.64/11.34.36/11.36.14 on Windows and classified as problematic. The affected element is an unknown function of the component Installation. This manipulation causes uncontrolled search path. The identification of this vulnerability is CVE-2024-13976. The attack can only be executed locally. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Four-Faith F3x24 and F3x36 2.0. Affected by this issue is some unknown functionality of the file apply.cgi. The manipulation results in os command injection. This vulnerability is known as CVE-2024-12856. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Rejetto HTTP File Server up to 2.3m. It has been rated as very critical. This affects an unknown part of the component HTTP Request Handler. Performing manipulation results in improper neutralization of special elements used in a template engine. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2024-23692. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in Asus ExpertWiFi, RT-AX55, RT-AX58U, RT-AC67U, RT-AC68R, RT-AC68U, RT-AX86 Series, RT-AC86U, RT-AX88U and RT-AX3000 and classified as critical. This vulnerability affects unknown code of the component Custom OpenVPN Profile Handler. The manipulation results in os command injection. This vulnerability is known as CVE-2024-0401. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in Maplesoft Maple up to 13. Affected by this issue is some unknown functionality of the component Maplet File Handler. Executing manipulation can lead to code injection. This vulnerability is tracked as CVE-2010-20120. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in InterSystems Caché up to 2009.1. This affects an unknown part of the file UtilConfigHome.csp of the component HTTP GET Request Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2009-20005. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in ProjectSend up to r1719. It has been rated as critical. Affected by this issue is some unknown functionality of the file options.php of the component HTTP Request Handler. This manipulation causes improper authentication. This vulnerability is handled as CVE-2024-11680. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Sockso Project Music Host Server up to 1.5. It has been rated as critical. This affects an unknown part of the file /file/ of the component HTTP Interface. Performing manipulation results in path traversal. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is reported as CVE-2012-10061. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Artica Pandora FMS up to 5.0 SP2 and classified as critical. This impacts an unknown function of the file mobile/index.php of the component File Manager Component. Such manipulation of the argument loginhash_data leads to sql injection. This vulnerability is listed as CVE-2014-125115. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in iGENUS iGENUS Webmail up to 2.02. This affects an unknown part of the file config/config_inc.php. Performing manipulation of the argument SG_HOME results in code injection. This vulnerability is identified as CVE-2006-1031. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability identified as problematic has been detected in iFoto 0.20. The affected element is an unknown function. Performing manipulation of the argument File results in basic cross site scripting. This vulnerability is known as CVE-2006-3006. Remote exploitation of the attack is possible. Furthermore, an exploit is available. You should upgrade the affected component.

A vulnerability identified as critical has been detected in IDevSpot PhpLinkExchange 1.0. The impacted element is an unknown function of the file index.php. Performing manipulation of the argument page results in code injection. This vulnerability is reported as CVE-2006-3777. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability categorized as critical has been discovered in IDevSpot AutoHost 3.0. The affected element is an unknown function of the file order/index.php. Such manipulation of the argument page leads to code injection. This vulnerability is documented as CVE-2006-3776. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability, which was classified as problematic, has been found in Rhadrix If-CMS 1.01/2.07. The impacted element is an unknown function of the file index.php. This manipulation of the argument rns causes basic cross site scripting. The identification of this vulnerability is CVE-2006-5761. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in IDevSpot iSupport 1.8. This affects an unknown function. The manipulation of the argument cons_page_title results in basic cross site scripting. This vulnerability is known as CVE-2006-4884. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability has been found in Oracle Communications Cloud Native Core Binding Support Function 22.2.1 and classified as critical. The affected element is an unknown function of the component Signaling. This manipulation causes improper input validation. The identification of this vulnerability is CVE-2021-44832. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Oracle Communications Cloud Native Core Policy 22.2.1 and classified as critical. The impacted element is an unknown function of the component Signaling. Such manipulation leads to improper input validation. This vulnerability is referenced as CVE-2021-44832. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in Oracle Product Lifecycle Analytics 3.6.1 and classified as critical. This vulnerability affects unknown code of the component Installation Issues. The manipulation leads to improper input validation. This vulnerability is referenced as CVE-2021-44832. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.