9120 matches found
CVE-2023-51630
CVE-2023-51630 affects Paessler PRTG Network Monitor. The flaw is a cross-site scripting issue in the web console caused by insufficient validation of user-supplied data, enabling the injection of arbitrary scripts. This can be exploited to bypass authentication on affected installations, with us...
Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability
Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. A cross-site scripting vulnerability exists in Paessler PRTG Network Monitor that stems from a lack of proper validation of user-supplied data...
CVE-2023-51630: Improper Neutralization of Input During Web Page Generation
Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Paessler PRTG Network Monitor. User interaction is required to exploit this vulnerability in that the target mus...
CVE-2023-28049
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete...
CVE-2023-28049
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete...
Arbitrary file deletion
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete...
CVE-2023-28049
Dell Command | Monitor (Dell) affected product: Dell Command | Monitor versions prior to 10.9. The vulnerability is an arbitrary folder deletion bug exploitable by a locally authenticated user to perform a privileged arbitrary file delete, with impact on integrity and availability as described in...
CVE-2023-28049
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete...
CVE-2023-28049
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete...
PT-2024-2255 · Microsoft · Office
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to the incorrect handling of symbolic links by the Office Performance Monitor executable in Microsoft Office, which can be exploited by creating a specially...
PT-2024-12150 · Dell · Dell Command | Monitor
Name of the Vulnerable Software and Affected Versions: Dell Command | Monitor versions prior to 10.9 Description: The issue allows a locally authenticated malicious user to perform a privileged arbitrary file delete by exploiting an arbitrary folder deletion vulnerability. Recommendations: For...
CVE-2023-28049: Privilege Defined With Unsafe Actions
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete...
Dell Command | Monitor Security Vulnerability
Dell Command | Monitor is a software application from Dell, Inc. It enables IT administrators to easily manage fleet resource inventories, monitor system performance, modify BIOS settings, and remotely collect information about deployed Dell client systems. A security vulnerability exists in Dell...
articles.concordmonitor.com Cross Site Scripting vulnerability OBB-3848535
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-1185
A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclos...
Design/Logic Flaw
A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclos...
CVE-2024-1185
CVE-2024-1185 affects Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0, specifically the Registration Handler. The issue allows a locally approached denial of service due to a vulnerability in that component. Public exploit information is indicated, and the vendor reportedly did not respond to...
CVE-2024-1185 Nsasoft NBMonitor Network Bandwidth Monitor Registration denial of service
A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclos...
PT-2024-17292
Name of the Vulnerable Software and Affected Versions Nsasoft NBMonitor Network Bandwidth Monitor version 1.6.5.0 Description A problematic vulnerability has been found in the Registration Handler component of the software, which can lead to denial of service. The attack must be approached locall...
CVE-2024-1185: Improper Resource Shutdown or Release
A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclos...