CVE-2024-5622

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5624

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624

CVE-2024-5624 is a reflected XSS vulnerability in the Shift Logbook component of B&R APROL, affecting versions up to R 4.4-00P3. The issue is caused by a cross-site scripting flaw in the Shift Logbook application that could allow a network-based attacker to execute arbitrary JavaScript in the use...

CVE-2024-5623 Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5623

CVE-2024-5623 affects B&R APROL up to R 4.4-00P3. The vulnerability is an untrusted search path that could allow an authenticated local attacker to cause other users to execute arbitrary code with the attacker’s privileges. Documents confirm the affected software and the root cause, but do not pr...

CVE-2024-5623 Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5622

The CVE-2024-5622 entry concerns B&R APROL (AprolConfigureCCServices). Multiple sources corroborate an untrusted search path vulnerability that could allow an authenticated local attacker to execute arbitrary code with elevated privileges. Affected are APROL versions R 4.2.-07P3 and R 4.4-00P3 or...

CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5623: Execution with Unnecessary Privileges

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5624: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5622: Execution with Unnecessary Privileges

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-8294: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

CVE-2024-8296: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument Useravatar leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2024-21857

Uncontrolled search path for some IntelR oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-21769

CVE-2024-21769 (Intel) describes an uncontrolled search path in the Windows installer for the Intel Ethernet Adapter Complete Driver Pack and the Intel(R) Ethernet Connection I219-LM installer. The weakness could allow an authenticated local attacker to escalate privileges. Intel’s advisory INTEL...