151 matches found
PT-2024-27619 · Artistscope · Artistscope Copysafe Web Protection
Name of the Vulnerable Software and Affected Versions: ArtistScope CopySafe Web Protection versions 3.14 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...
CVE-2024-5566
An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate scopes defined on the related Personal Access Token. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6,...
PT-2024-37178 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 GitHub Enterprise Server version 3.9.17 GitHub Enterprise Server version 3.10.14 GitHub Enterprise Server version 3.11.12 GitHub Enterprise Server version 3.12.6 GitHub Enterprise Server version...
PT-2024-37179 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 Description: An Incorrect Authorization issue was identified in GitHub Enterprise Server, allowing read access to issue content via GitHub Projects. This issue was only exploitable in internal...
PT-2024-36574 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 Description: An improper privilege management issue allowed users to migrate private repositories without having the appropriate scopes defined on the related Personal Access Token...
WordPress CopySafe Web Protection plugin <= 3.14 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin CopySafe Web Protection versions = 3.14...
GitHub: Information Leakage via Clicked Link in GitHub Repository (Fingerprinting)
A vulnerability was identified in GitHub Enterprise Server that allowed an attacker to retrieve metadata information of a user who clicks on an uploaded malicious asset URL. The vulnerability affected all versions prior to 3.14 and was fixed in later versions...
openSUSE: Security Advisory for iperf (SUSE-SU-2023:3887-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Authorization
Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...
Dell Power Manager Security Vulnerability
Dell Power Manager is an application from Dell Inc. that is used to configure battery maintenance practices to maximize system battery life. A security vulnerability exists in Dell Power Manager versions prior to 3.14 that stems from the inclusion of an improper authorization vulnerability in the...
PT-2024-12066 · Dell · Dell Power Manager
Name of the Vulnerable Software and Affected Versions: Dell Power Manager versions prior to 3.14 Description: The issue is related to an Improper Authorization vulnerability in the DPM service. A low-privileged malicious user could potentially exploit this vulnerability to elevate privileges on t...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: scorecard, cortex, kubescape, spark-operator, src, up, kubevela, k3d, dgraph, buildkitd, terraform-provider-sendgrid, prometheus-blackbox-exporter, kubeflow, aactl, slsa-verifier...
CVE-2023-32450
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...
CVE-2023-32450
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...
CVE-2023-32450
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...
CVE-2023-32450
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...
Dell Power Manager 安全漏洞
Dell Power Manager is an application from Dell Inc. that is used to configure battery maintenance practices to maximize the battery life of a system. A security vulnerability exists in Dell Power Manager versions 3.3 through 3.14 that stems from the presence of an Access Control Error...
DEBIAN-CVE-2023-38403
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...