CVE-2024-3576
published 2024-05-06CVE-2024-3576: The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulnerability is caused by not correctly…
PriorityP343high8.3CVSS 3.1
AVNACLPRNUINSCCLILAL
EPSS
0.38%
30.9th percentile
The NPort 5100A Series firmware version v1.6 and prior versions are affected by web server XSS vulnerability. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output. Malicious users may use the vulnerability to get sensitive information and escalate privileges.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | nport_5100a_series | 1.0 – 1.6 | — |
CVSS provenance
nvdv3.18.3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8hfj-v3g5-5mpj: The NPort 5100A Series prior to version 1
ghsa_unreviewed·2024-05-06
CVE-2024-3576 [HIGH] CWE-79 GHSA-8hfj-v3g5-5mpj: The NPort 5100A Series prior to version 1
The NPort 5100A Series prior to version 1.6 is affected by web server XSS vulnerability. The vulnerability is caused by not correctly neutralizing user-controllable input before placing it in output. Malicious users may use the vulnerability to get sensitive information and escalate privileges.
Red Hat
kernel: ext4: fix off by one issue in alloc_flex_gd()
vendor_redhat·2024-10-21·CVSS 7.8
CVE-2024-49880 [HIGH] CWE-193 kernel: ext4: fix off by one issue in alloc_flex_gd()
kernel: ext4: fix off by one issue in alloc_flex_gd()
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix off by one issue in alloc_flex_gd()
Wesley reported an issue:
EXT4-fs (dm-5): resizing filesystem from 7168 to 786432 blocks
------------[ cut here ]------------
kernel BUG at fs/ext4/resize.c:324!
CPU: 9 UID: 0 PID: 3576 Comm: resize2fs Not tainted 6.11.0+ #27
RIP: 0010:ext4_resize_fs+0x1212/0x12d0
Call Trace:
__ext4_ioctl+0x4e0/0x1800
ext4_ioctl+0x12/0x20
__x64_sys_ioctl+0x99/0xd0
x64_sys_call+0x1206/0x20d0
do_syscall_64+0x72/0x110
entry_SYSCALL_64_after_hwframe+0x76/0x7e
While reviewing the patch, Honza found that when adjusting resize_bg in
alloc_flex_gd(), it was possible for flex_gd->resize_bg to be bigger than
flexbg_size.
The reproduction of the probl
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-05-06
Published