14410 matches found
PT-2024-38019 · Omntec · Omntec Proteus Tank Monitoring Oel8000Iii Series
Name of the Vulnerable Software and Affected Versions: OMNTEC Proteus Tank Monitoring OEL8000III Series affected versions not specified Description: The issue allows an attacker to perform administrative actions without proper authentication. It is being actively exploited. Recommendations: At th...
OMNTEC Proteus Tank Monitoring OEL8000III Series 访问控制错误漏洞
The OMNTEC Proteus Tank Monitoring OEL8000III Series is an automated tank gauging and leak detection system from OMNTEC. An access control error vulnerability exists in the OMNTEC Proteus Tank Monitoring OEL8000III Series that originates from the ability to perform administrative operations witho...
CVE-2024-45983
A Cross-Site Request Forgery CSRF vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The vulnerability allows an attacker to craft a malicious HTML form that submits a request to delete a doctor record. By enticing an authenticated admin user to visit the specially...
Hospital Management System 安全漏洞
Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version 6.3.5 that stems from the presence of a cross-site request forgery...
CVE-2024-45983
CVE-2024-45983 describes a Cross-Site Request Forgery in kishan0725’s Hospital Management System v6.3.5. A malicious page crafted by an attacker can lure an authenticated admin to submit a request that deletes a doctor record, exploiting the admin’s browser to act on behalf of the admin without c...
Projectworlds Online Voting System 安全漏洞
Projectworlds Online Voting System is an online voting system from Projectworlds India. A security vulnerability exists in Projectworlds Online Voting System version 1.0, which stems from vulnerability to cross-site request forgery attacks via voter.php, allowing an attacker to create malicious...
PT-2024-32527 · Givewp · Givewp
Name of the Vulnerable Software and Affected Versions: GiveWP versions prior to 3.15.2 Description: A Cross-Site Request Forgery CSRF issue affects GiveWP, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For versions prior to 3.15.2,...
OMNTEC Proteus Tank Monitoring (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : OMNTEC Mfg., Inc. Equipment : Proteus Tank Monitoring Vulnerability : Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability allow an...
CVE-2022-2439
The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'uploadfile' parameter in versions up to, and including 3.3.3. This makes it possible for authenticated administrative users to call files using...
kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...
kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...
PT-2024-39011 · Themehunk · Easy Mega Menu Plugin
Name of the Vulnerable Software and Affected Versions: Easy Mega Menu Plugin for WordPress – ThemeHunk plugin versions up to, and including, 1.0.9 Description: The issue arises from a missing capability check on several functions hooked via AJAX, allowing authenticated attackers with...
PT-2024-9155
Name of the Vulnerable Software and Affected Versions: virtualenv versions prior to 20.26.6 Description: The issue is related to command injection through the activation scripts for a virtual environment in virtualenv. It is caused by the incorrect quoting of magic template strings when replacing...
CVE-2024-45806
A vulnerability was found in Envoy that allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration of internal trust boundaries, which considers all RFC1918...
CVE-2024-45806
Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...
Versa Director 安全漏洞
Versa Director is a virtualization and service creation platform from Versa USA. that simplifies the creation, automation and delivery of services using Versa FlexVNF. A security vulnerability exists in Versa Director that stems from allowing an attacker to disclose authentication tokens via...
CVE-2024-45806
CVE-2024-45806 affects Envoy, a cloud-native edge proxy. The vulnerability stems from Envoy’s default handling of internal RFC1918 addresses, which are trusted even if internal_address_config is empty. An external client could exploit this to manipulate headers (e.g., x-envoy headers), potentiall...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to insufficient authentication in the upgrade flow. An attacker can bypass access restrictions and perform unauthorized actions by exploiting the unprotected upgrade logic. Remediation...
CVE-2024-31177
Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg modules. This vulnerability is associated with program routines fluidmsg::of13::TableFeaturePropActions::unpack. This issue affects libfluid: 0.1.0...