CVE-2023-26260

OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's account by an attacker, due to an improper check of the user agent...

NGINX Agent NGINX Instance Manager Secret Key Access

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to secret keys...

CVE-2023-0975

A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent’s executables before it can be executed. This allows the user to elevate their permissions...

ChiKoi v1.0 - SQL Injection

Title: ChiKoi-1.0 SQLi Author: nu11secur1ty Date: 01.12.2023 Vendor: https://chikoiquan.tanhongit.com/ Software: https://github.com/tanhongit/new-mvc-shop/releases/tag/v1.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/tanhongit/2023/ChiKoi Description: The...

PT-2023-2180

Name of the Vulnerable Software and Affected Versions NGINX Agent versions 2.0 through 2.23.2 Description The issue is related to insufficient protection of registration data, which may allow an attacker to gain access to private keys. This can occur when an authenticated attacker with local acce...

Rakuraku PC Cloud Agent 安全漏洞

Rakuraku PC Cloud Agent is a cloud environment client. A security vulnerability exists in SS1 Ver.13.0.0.40 and earlier versions, Rakuraku PC Cloud Agent Ver.2.1.8 and earlier versions, which stems from incorrect access control. An attacker could use this vulnerability to bypass access restrictio...

Checkmk 代码问题漏洞

Checkmk is an editor. Checkmk Agent has a security vulnerability. An attacker can elevate privileges by manipulating unixcat...

XXE vulnerability on agents in mstest

mstest 1.0.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the contents of the report file for the 'Publish MSTest test result report' post-build step to have agent processes parse a crafted file that uses external...

XXE vulnerability on agents in violations

violations 0.7.11 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers to to control XML input files for the 'Report Violations' post-build step to have agent processes parse a crafted file that uses external entities for extraction of...

CVE-2022-37877

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager versions...

PT-2022-37674 · Palo Alto Networks · Cortex Xdr Agent

Уязвимость средства анализа сетевого трафика, сетевого обнаружения и реагирования Cortex XDR Agent связана с ошибками в коде. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании системных служб Windows...

Jenkins Compuware zAdviser API Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2022-33754

CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code...

ma.db Database Information Disclosure

The vulnerability of the ma.db database in the McAfee Agent antivirus software is related to deficiencies in data storage. Exploiting this vulnerability can allow attackers to obtain confidential information...

Denial Of Service (DoS)

github.com/open-policy-agent/opa, is vulnerable to denial of service DoS. The vulnerability exists due to Incorrect calculation in defaultLocation function in format.go file allowing an attacker to crash the system...

CVE-2021-43239

Windows Recovery Environment Agent Elevation of Privilege Vulnerability...

Puppet 安全漏洞

Puppet is a set of configuration management tools based on the client/server C/S architecture from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end-program. A security...

Code injection

Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent...

Tenable Network Security Nessus 输入验证错误漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. An input validation error vulnerability exists in Nessus Agent version 8.3.0 and prior versions, which can be exploited by an attacker to run a specific executable file on the Nessus...

CVE-2021-20109

Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the...