VulDB Recent Entries

A vulnerability classified as critical was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. Affected by this vulnerability is the function sta_log_htm of the component API. The manipulation leads to os command injection. This vulnerability is known as CVE-2024-50367. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. Affected is the function applications_apply of the component API. The manipulation leads to os command injection. This vulnerability is traded as CVE-2024-50366. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. It has been rated as critical. This issue affects the function lan_apply of the component API. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2024-50365. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. It has been declared as critical. This vulnerability affects the function export_log of the component API. The manipulation leads to os command injection. This vulnerability was named CVE-2024-50364. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. It has been classified as critical. This affects the function mp_apply of the component API. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-50363. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO and classified as critical. Affected by this issue is the function connection_profile_apply. The manipulation leads to os command injection. This vulnerability is handled as CVE-2024-50362. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO and classified as critical. Affected by this vulnerability is the function certificate_file_remove of the component API. The manipulation leads to os command injection. This vulnerability is known as CVE-2024-50361. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. Affected is the function snmp_apply of the component API. The manipulation leads to os command injection. This vulnerability is traded as CVE-2024-50360. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO up to 1.6.3. This issue affects the function scan_ap of the component API. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2024-50359. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. This vulnerability affects unknown code of the component Configuration Backup Handler. The manipulation leads to external control of system or configuration setting. This vulnerability was named CVE-2024-50358. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as very critical has been found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-50375. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Mozilla Convict up to 6.2.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Object Prototype Handler. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is handled as CVE-2023-0163. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO up to 1.6.3. It has been declared as very critical. Affected by this vulnerability is the function capture_packages. The manipulation leads to os command injection. This vulnerability is known as CVE-2024-50374. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. It has been classified as very critical. Affected is the function restore_config_from_utility. The manipulation leads to os command injection. This vulnerability is traded as CVE-2024-50373. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO and classified as very critical. This issue affects the function backup_config_to_utility. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2024-50372. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO and classified as very critical. This vulnerability affects the function wlan_scan. The manipulation leads to os command injection. This vulnerability was named CVE-2024-50371. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as very critical, was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. This affects the function cfg_cmd_set_eth_conf of the component edgserver Service. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-50370. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as very critical, has been found in ProjectSend up to r1719. Affected by this issue is some unknown functionality of the file options.php of the component HTTP Request Handler. The manipulation leads to improper authentication. This vulnerability is handled as CVE-2024-11680. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Apache NimBLE up to 1.7.0. Affected by this vulnerability is an unknown functionality of the component HCI Event Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-51569. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Apache NimBLE up to 1.7.0. Affected is an unknown function of the component HCI Advertising Report Validation. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-47250. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.