CVE-2024-29853

An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation...

CVE-2024-29853

An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation...

CVE-2024-29853

CVE-2024-29853 affects Veeam Agent for Windows (VAW). The vulnerability is an authentication bypass leading to Local Privilege Escalation. Public details across connected docs confirm the issue is addressed in Veeam releases: VAW was fixed starting with build 6.1.2.134, and broader product remedi...

kernel: RDMA/srpt: Add a check for valid 'mad_agent' pointer

A flaw was addressed in the Linux kernel’s RDMA SRPT SCSI RDMA Protocol Target subsystem. When unregistering a MAD Management Datagram agent, the SRPT module previously performed a non-NULL check on the madagent pointer before invoking ibunregistermadagent. Under rare timing...

CVE-2024-3666

CVE-2024-3666: Opal Estate Pro – Property Management and Submission (WordPress) is vulnerable to Stored Cross-Site Scripting up to version 1.7.6 due to insufficient input sanitization and output escaping in agent latitude/longitude parameters. Exploitation requires authenticated access (Contribut...

CVE-2024-1762

The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTTPUSERAGENT header in all versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...

WordPress NextScripts plugin <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent vulnerability

Unauthenticated Stored Cross-Site Scripting via User Agent vulnerability discovered by Piotr Kuśpit in WordPress Plugin NextScripts versions = 4.4.3...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which originates from the discovery of a file containing the following information via the...

Tenable Network Security Nessus Agent Competitive Conditions Vulnerability

The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. A competitive condition vulnerability exists in the Tenable Network Security Nessus Agent, which can be exploite...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component...

CHAOS 5.0.8 Cross Site Scripting / Remote Command Execution Exploit

CHAOS version 5.0.8 is a free and open-source Remote Administration Tool that allows generated binaries to control remote operating systems. The web application contains a remote command execution vulnerability which can be triggered by an authenticated user when generating a new executable. The...

PT-2024-18284 · WordPress · Nextscripts: Social Networks Auto-Poster

Name of the Vulnerable Software and Affected Versions: NextScripts: Social Networks Auto-Poster plugin for WordPress versions up to, and including, 4.4.3 Description: The issue allows unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which was discovered via the component...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component...

Veeam Agent for Windows 安全漏洞

Veeam Agent for Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Windows that stems from an authentication bypass vulnerability that allows local elevation of privilege...

Tenable Network Security Nessus Agent Elevation of Privilege Vulnerability

The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. An elevation of privilege vulnerability exists in Tenable Network Security Nessus Agent that stems from a failur...

GHSA-V9HF-5J83-6XPP vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-36039 vulnerabilities

Vulnerabilities for packages: py3-pymysql...

PT-2024-4156

Name of the Vulnerable Software and Affected Versions Veeam Agent for Microsoft Windows affected versions not specified Description The issue is related to weaknesses in the authentication procedure of Veeam Agent for Microsoft Windows, allowing for local privilege escalation. This can enable an...

Veeam Agent for Microsoft Windows Vulnerability (CVE-2024-29853)

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...