4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardless of how many times a user logs in, the content of the cookie remains unchanged.
AFFECTED_PRODUCTS:
4Ipnet Eap 767 Firmware
A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability.
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities.
An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks.
AFFECTED_PRODUCTS:
Tenable Security Center
A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host.
AFFECTED_PRODUCTS:
Tenable Security Center
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.
AFFECTED_PRODUCTS:
Tianocore Edk2,
Canonical Lxd
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
AFFECTED_PRODUCTS:
Debian Debian Linux,
Tianocore Edk2,
Canonical Lxd
... (+1)
Mastodon is a free, open-source social network server based on ActivityPub. When an OAuth Application is destroyed, the streaming server wasn't being informed that the Access Tokens had also been destroyed, this could have posed security risks to users by allowing an application to continue listenin...
AFFECTED_PRODUCTS:
Joinmastodon Mastodon,
Joinmastodon Mastodon,
Joinmastodon Mastodon
... (+1)
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows new identities from configured authentication providers (CAS, SAML, OIDC) to attach to existing local users with the same e-mail address. This results in a possible account takeover if the authentication prov...
AFFECTED_PRODUCTS:
Joinmastodon Mastodon,
Joinmastodon Mastodon,
Joinmastodon Mastodon
... (+1)
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Ser...
AFFECTED_PRODUCTS:
Squid-Cache Squid
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.
AFFECTED_PRODUCTS:
Swftools Swftools
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUB_TOKEN. To exploit this vulnerability, an attacker would need access t...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite implementation of the RPL protocol in the Contiki-NG operating system. This vulnerability is caused by insufficient control of the lengths for DI...
AFFECTED_PRODUCTS:
Contiki-Ng Contiki Ng
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More specifically, the prefix information of the DIO message contai...
AFFECTED_PRODUCTS:
Contiki-Ng Contiki Ng
Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php.
AFFECTED_PRODUCTS:
Redaxo Redaxo
A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section.
AFFECTED_PRODUCTS:
Redaxo Redaxo
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 radios on nRF platforms in the Contiki-NG operating system. The problem is triggered when parsing radio frames in the `read_frame` function in...
AFFECTED_PRODUCTS:
Contiki-Ng Contiki Ng
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of an authenticated Captive Portal user’s browser) if a user clicks on a malicious link, allowing phishing attacks that c...
AFFECTED_PRODUCTS:
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS
... (+2)
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential...
AFFECTED_PRODUCTS:
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS
... (+2)
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.
AFFECTED_PRODUCTS:
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS
Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access.
AFFECTED_PRODUCTS:
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS
... (+6)
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface on Panorama appliances. This enables the impersonation of another authenticated administrator.
AFFECTED_PRODUCTS:
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS,
Palo Alto Networks PAN-OS
... (+3)
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://n...
AFFECTED_PRODUCTS:
F5 Nginx Plus,
F5 Nginx Plus,
F5 Nginx Open Source
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate.
Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3 https://n...
AFFECTED_PRODUCTS:
F5 Nginx Plus,
F5 Nginx Open Source
When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
AFFECTED_PRODUCTS:
F5 F5os A,
F5 F5os C
When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+31)
When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Secu...
AFFECTED_PRODUCTS:
F5 Big Ip Policy Enforcement Manager,
F5 Big Ip Policy Enforcement Manager,
F5 Big Ip Policy Enforcement Manager
When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization.
Note: Software versions which have reached End of Technical Support (EoT...
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+31)
When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance
mode restrictions utilizing iAppsLX templates on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+31)
Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables avr.IncludeServ...
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Advanced Web Application Firewall
... (+3)
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
AFFECTED_PRODUCTS:
F5 F5os A,
F5 F5os C
An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Advanced Web Application Firewall
... (+3)
When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+32)
When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause the BD process to terminate. The condition results from setting the Request Body Handling option in the Header-Based Content Profile for an Allowed URL...
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Application Security Manager
A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Next Cloud Native Network Functions
When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+31)
When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Supp...
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+31)
When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Application Security Manager
When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Web Application Firewall,
F5 Big Ip Application Security Manager
BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873....
AFFECTED_PRODUCTS:
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager,
F5 Big Ip Access Policy Manager
... (+31)
For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic against signatures, resulting in Traffic Management Microkernel (TMM) restarting and traffic disruption. Note: Software versions which have reached End of Technical Support (EoTS) are...
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Firewall Manager,
F5 Big Ip Advanced Firewall Manager,
F5 Big Ip Advanced Firewall Manager
When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffic Management Microkernel (TMM) to terminate. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated
AFFECTED_PRODUCTS:
F5 Big Ip Advanced Firewall Manager
CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering
of device configuration over NFC communication.
AFFECTED_PRODUCTS:
Se Rmnf22tb30 Firmware,
Se Renf22r2mmw Firmware
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.
AFFECTED_PRODUCTS:
Schneider Electric Ecostruxure Control Expert,
Schneider Electric Ecostruxure Process Expert
CWE-924: Improper Enforcement of Message Integrity During Transmission in a
Communication Channel vulnerability exists that could cause a denial of service and loss of
confidentiality, integrity of controllers when conducting a Man in the Middle attack.
AFFECTED_PRODUCTS:
Schneider Electric Modicon M340 Bmxp341000 Firmware,
Schneider Electric Modicon M340 Bmxp342010 Firmware,
Schneider Electric Modicon M340 Bmxp342020 Firmware
... (+43)
Rejected reason: This is unused.
Rejected reason: This is unused.
Rejected reason: This is unused.
Rejected reason: This is unused.