5033 matches found
Path traversal
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-6032
CVE-2023-6032 is a path traversal vulnerability in Schneider Electric Galaxy VS and Galaxy VL Network Management Cards accessible over HTTPS. The root cause is improper limitation of a pathname to a restricted directory, enabling filesystem enumeration and file download. Documented affected produ...
CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-34060
VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass log...
Authentication flaw
VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass log...
studio-22.de Improper Access Control vulnerability OBB-3780267
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-6954 · Vmware · Vmware Cloud Director Appliance +1
Name of the Vulnerable Software and Affected Versions: VMware Cloud Director Appliance versions 10.5 through 10.5 Description: The issue concerns an authentication bypass vulnerability in VMware Cloud Director Appliance. A malicious actor with network access to the appliance can bypass login...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29552 Service Location Protocol SLP Denial-of-Service Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pos...
CVE-2023-5923
creationtimestamp| type| source ---|---|--- 2023-11-02 21:22:49+00:00| seen| https://t.me/cibsecurity/73470...
CVE-2023-5875
creationtimestamp| type| source ---|---|--- 2023-11-02 11:22:25+00:00| seen| https://t.me/cibsecurity/73418...
CVE-2023-44025
creationtimestamp| type| source ---|---|--- 2023-11-02 01:22:05+00:00| seen| https://t.me/cibsecurity/73393...
CVE-2023-20042
creationtimestamp| type| source ---|---|--- 2023-11-01 21:22:15+00:00| seen| https://t.me/cibsecurity/73380 2023-11-22 15:29:04+00:00| seen| https://t.me/arpsyndicate/352...
CVE-2023-5850
creationtimestamp| type| source ---|---|--- 2023-11-01 21:22:09+00:00| seen| https://t.me/cibsecurity/73374...
CVE-2023-46722
creationtimestamp| type| source ---|---|--- 2023-10-31 19:22:32+00:00| seen| https://t.me/cibsecurity/73262...
CVE-2023-5796
creationtimestamp| type| source ---|---|--- 2023-10-26 22:16:01+00:00| seen| https://t.me/cibsecurity/72994...
CVE-2023-42492
creationtimestamp| type| source ---|---|--- 2023-10-25 22:52:59+00:00| seen| https://t.me/cibsecurity/72903...
CVE-2023-46562
creationtimestamp| type| source ---|---|--- 2023-10-25 22:52:58+00:00| seen| https://t.me/cibsecurity/72902...
CVE-2023-46557
creationtimestamp| type| source ---|---|--- 2023-10-25 22:49:29+00:00| seen| https://t.me/cibsecurity/72879...