16507 matches found
CVE-2025-27705: Improper Neutralization of Input During Web Page Generation
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administratorβs use of the management console when the second administrator...
PT-2025-11962
Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.53 Absolute Secure Access versions prior to 13.07 Description The issue is related to a cross-site scripting vulnerability in the Secure Access administrative console. Attackers with system...
CVE-2024-7631: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
RockyLinux 9 : bluez (RLSA-2024:9413)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9413 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP Improper...
Cross-Site Scripting (XSS)
org.apache.felix, org.apache.felix.http.webconsoleplugin is vulnerable to cross-site scripting XSS. The vulnerability is due to improper neutralization of user input during web page generation, allowing an attacker to inject and execute malicious scripts in a victimβs browser through improperly...
PT-2025-18214 Β· FinitΒ +1 Β· FinitΒ +1
Name of the Vulnerable Software and Affected Versions: Finit versions 3.0-rc1 through 4.11 Description: Finit is a fast init for Linux systems. The issue concerns the implementation of getty for the tty configuration directive, which can bypass /bin/login, allowing a user to log in as any user...
Sytel Softdial Contact Center (Sytel SCC) code-related vulnerabilities
Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A code issue vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from an unrestricted file upload in the /softdial/phpconsole/upload.php endpoint, which could lead to code executio...
WEM Agents are not listed in Console and failed to register
WEM Agents are not listed in Console and failed to register, Citrix WEM Agent Host Service Debug.log and Event Logs shows the below exception. ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient : System.ServiceModel.Security.SecurityNegotiationException : The caller was not authenticate...
While adding Active Directory Objects In WEM Console, Organizational Units list is empty
When try to add OU in WEM Administration Console - Active Directory Objects - Machines - Add OU option shows empty organizational unit list...
CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-21104
Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site 'Open Redirect' Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted applicatio...
PT-2025-11219
Name of the Vulnerable Software and Affected Versions: Inova Logic CUSTOMER MONITOR CM version 3.1.757.1 Description: The issue is related to incorrect access control in the scheduled tasks console, allowing attackers to escalate privileges by placing a crafted executable into a scheduled task...
InovaLogic CUSTOMER MONITOR security vulnerabilities
InovaLogic CUSTOMER MONITOR is a sophisticated IT monitoring and management software from InovaLogic that significantly improves the reliability of IT infrastructure and simplifies remote IT systems. A security vulnerability exists in InovaLogic CUSTOMER MONITOR v3.1.757.1, which stems from...
PT-2025-11167 Β· Dell Β· Dell Networker
Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.11.0.3 and below Description: The issue is an Open Redirect Vulnerability in NMC, which could allow an unauthenticated attacker with remote access to redirect a targeted application user to arbitrary web URLs. This...
CVE-2025-25598
The Inova Logic CUSTOMER MONITOR (CM) software, specifically version v3.1.757.1 , contains an incorrect access control vulnerability within the scheduled tasks console . This flaw allows an attacker to achieve privilege escalation by placing a crafted executable into a scheduled task. While no sp...
CVE-2025-25598: Improper Access Control
Incorrect access control in the scheduled tasks console of Inova Logic CUSTOMER MONITOR CM v3.1.757.1 allows attackers to escalate privileges via placing a crafted executable into a scheduled task...
CVE-2025-21104: URL Redirection to Untrusted Site
Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site 'Open Redirect' Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted applicatio...
March Microsoft Patch Tuesday
March Microsoft Patch Tuesday. 77 CVEs, 20 of which were added during the month. 7 vulnerabilities with signs of exploitation in the wild: RCE - Windows Fast FAT File System Driver CVE-2025-24985 RCE - Windows NTFS CVE-2025-24993 SFB - Microsoft Management Console CVE-2025-26633 EoP - Windows Win...
Microsoft Patch Tuesday for March 2025 β Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...
