45 matches found
CVE-2024-23472 SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
SolarWinds Access Rights Manager ARM is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM...
CVE-2024-34096 ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Security Bulletin: IBM InfoSphere DataStage Flow Designer is affected by an information disclosure vulnerability (CVE-2023-23472)
Summary An information disclosure vulnerability in InfoSphere DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2023-23472 DESCRIPTION: IBM InfoSphere DataStage Flow Designer could allow an authenticated user to obtain sensitive information that could aid in further attacks...
CVE-2022-23472
creationtimestamp| type| source ---|---|--- 2022-12-06 20:40:59+00:00| seen| https://t.me/cibsecurity/54080...
CVE-2022-23472
Passeo (open source Python password generator) before v1.0.5 uses the Python random module for value generation, which is non-cryptographically secure. This may allow a motivated attacker to guess generated passwords. The issue is addressed in v1.0.5; upgrade to that version. No public workaround...
dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)
bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: OSV:GHSA-MW6Q-98MP-G8G8...
CVE-2021-23472
creationtimestamp| type| source ---|---|--- 2021-11-03 21:23:12+00:00| seen| https://t.me/cibsecurity/31756...
CVE-2021-23472
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...
CVE-2021-23472
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...
CVE-2021-23472 Cross-site Scripting (XSS)
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array instead of a string even if the escape attribute is set...
CVE-2021-23472
CVE-2021-23472 affects versions before 1.19.1 of the bootstrap-table package. The vulnerability is a type confusion that can bypass input sanitization when escapeHTML receives an array instead of a string, even if escape is enabled. Several connected sources (NVD, OSV, GHSA) corroborate the exist...
dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)
bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: SNYK:JS-BOOTSTRAPTABLE-1657597...
HP Diagnostics Server code execution
magentservice.exe code execution on TCP/23472 request parsing...
HP Diagnostics magentservice.exe Malformed Packet Parsing Vulnerability
Added: 10/12/2012 BID: 55159 OSVDB: 84855 Background HP Diagnostics software monitors application transaction health in traditional, virtualized and cloud environments. Problem HP Diagnostics Server has a buffer overflow vulnerability in the magentservice.exe process that could allow...
HP Diagnostics magentservice.exe Malformed Packet Parsing Vulnerability
Added: 10/12/2012 BID: 55159 OSVDB: 84855 Background HP Diagnostics software monitors application transaction health in traditional, virtualized and cloud environments. Problem HP Diagnostics Server has a buffer overflow vulnerability in the magentservice.exe process that could allow...
(0Day) HP Diagnostics Server magentservice.exe Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Diagnostics Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the magentservice.exe process which listens on port 23472 by default. The proces...
HP Diagnostics Server buffer overflow
Buffer overflow on TCP/23472 request parsing...
HP Diagnostics Server 'magentservice.exe' Buffer Overflow Vulnerability
HP Diagnostics Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
HP Diagnostics Server 'magentservice.exe' Buffer Overflow Vulnerability
This host is running HP Diagnostics Server and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbhpdiagnosticsservermagentservicebofvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ HP Diagnostics Server 'magentservice.exe' Buffer Overflow Vulnerability Authors: Rachana Shet...
HP Diagnostics Server magentservice.exe Overflow
require 'msf/core' class Metasploit3 'HP Diagnostics Server magentservice.exe overflow', 'Description' = %q This module exploits a stack buffer overflow in HP Diagnostics Server magentservice.exe service. By sending a specially crafted packet, an attacker may be able to execute arbitrary code...