Show filters
1,720 Total Results
Displaying 11-20 of 1,720
Sort by:
Attacker Value
Unknown
CVE-2024-45518
Disclosure Date: October 22, 2024 (last updated February 26, 2025)
An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before Patch 46. It allows authenticated users to exploit Server-Side Request Forgery (SSRF) due to improper input sanitization and misconfigured domain whitelisting. This issue permits unauthorized HTTP requests to be sent to internal services, which can lead to Remote Code Execution (RCE) by chaining Command Injection within the internal service. When combined with existing XSS vulnerabilities, this SSRF issue can further facilitate Remote Code Execution (RCE).
0
Attacker Value
Unknown
CVE-2024-31198
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31197
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31196
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::ActionList::unpack10.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31195
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTable::unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31194
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortStats::unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31193
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroup::unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31192
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroupDesc::unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31191
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeter::unpack.
This issue affects libfluid: 0.1.0.
0
Attacker Value
Unknown
CVE-2024-31190
Disclosure Date: September 18, 2024 (last updated February 26, 2025)
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeterConfig::unpack.
This issue affects libfluid: 0.1.0.
0
