The service is vulnerable to a stack buffer overflow.
Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.įasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br. (aka Anteros-DBCP).įile Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code execution. Madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue. The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie. It is possible for an attacker to run an arbitrary command on the host machine. This affects all versions of package safe-eval. This is fixed in version 1.14.3.įasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br. (aka anteros-core).įasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to. (aka ibatis-sqlmap).įasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to. (aka shaded hikari-config).įasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by .JndiConverter.Ī vulnerability exists in The EdgeMax EdgeSwitch firmware
0 kommentar(er)
