1398 matches found
CVE-2024-39581
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to read, modify, and delete arbitrary files...
QNAP QTS Multiple Vulnerabilities (QSA-24-28)
QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...
CVE-2023-37229
Loftware Spectrum before 5.1 allows SSRF...
PT-2024-28539
Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue allows an unauthenticated attacker with remote access to potentially read, modify, and delete arbitrary files. This is due to a File or Directories Accessible to External...
Wordpress BulletProof Security Backup Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'Wordpress BulletProof Security Backup Disclosure', 'Description' = %q The Wordpress plugin BulletProof Security, versions 'Ron...
CVE-2024-4554
Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting XSS attack. This issue affects Access Manager before 5.0.4.1 and 5.1...
CVE-2024-4556 Directory traversal vulnerability in NetIQ Access Manager
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1...
OpenText NetIQ Access Manager 安全漏洞
OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A security vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from an improper privilege management vulnerability that allows user account...
OpenText NetIQ Access Manager 安全漏洞
OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A security vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from a path traversal vulnerability that fails to properly restrict pathname...
OpenText NetIQ Access Manager 跨站脚本漏洞
OpenText NetIQ Access Manager is a comprehensive mobile and web access management tool from OpenText Canada. A cross-site scripting vulnerability exists in OpenText NetIQ Access Manager versions 5.0.4.1 and prior to 5.1, which stems from improper input validation and could lead to cross-site...
PT-2024-31687 · Opentext · Opentext Netiq Access Manager
Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 OpenText NetIQ Access Manager versions prior to 5.1 Description: The issue is related to improper privilege management, allowing user account impersonation in a specific scenario...
PT-2024-31686 · Opentext · Opentext Netiq Access Manager
Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 and 5.1 Description: The issue is caused by an improper input validation flaw in OpenText NetIQ Access Manager, leading to a Cross-Site Scripting XSS attack. Recommendations: For version...
SUSE: Security Advisory (SUSE-SU-2024:3001-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2024:2943-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2024:2909-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-4207
GitLab CVE-2024-4207 is a cross-site scripting vulnerability that affects multiple release lines: 5.1 up to 17.0.5, 17.1.0 up to 17.1.3, and 17.2.0 up to 17.2.1, triggered when viewing an XML file in repo raw view under certain conditions. The root cause is improper handling of input during web p...
CVE-2024-4207
Removed by vendor...
CVE-2024-39329
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password...
SUSE: Security Advisory (SUSE-SU-2024:2050-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...