Intel® RAID Web Console Software Advisory

Summary: Potential security vulnerabilities in Intel® RAID Web Console software may allow escalation of privilege, denial of service, information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® RAID Web...

PT-2024-6252

Name of the Vulnerable Software and Affected Versions Microsoft Management Console affected versions not specified Description The issue is related to a remote code execution risk, where exploitation may allow a remote attacker to execute arbitrary code. This is associated with a use-after-free...

Ivanti EPM security vulnerabilities

Ivanti EPM is a one-stop-shop for managing user profiles and all client devices from Ivanti, USA. A security vulnerability exists in Ivanti EPM that stems from the inclusion of an SQL injection vulnerability in the management console. An unauthenticated, remote attacker could exploit the...

Ivanti Workspace Control security vulnerabilities

Ivanti Workspace Control is an American etc are products of the American Ivanti company.Ivanti Workspace Control is a suite of workspace control software.console etc are open source products.console is an application software.WebSockets ws etc are WebSockets are open source products. ws is a...

Fedora: Security Advisory (FEDORA-2024-6b8845e3f0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-44107: Uncontrolled Search Path Element

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...

PT-2024-6662 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to the transmission of sensitive information in cleartext, allowing a local authenticated attacker to obtain operating system credentials. This can be...

CVE-2024-44105: Cleartext Transmission of Sensitive Information

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...

Ivanti Workspace Control security vulnerabilities

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management and report management. A security vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from th...

Ivanti Workspace Control code-related vulnerabilities

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...

Veeam Service Provider Console File Loading Code Execution

The vulnerability of the file loading function of the backup and data recovery software for remote and cloud-based Veeam Service Provider Console VSPC involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the VSPC...

Veeam Service Provider Console security vulnerabilities

Veeam Service Provider Console is a cloud-enabled platform from Veeam USA. A security vulnerability exists in Veeam Service Provider Console version 8.0.0.19552 and previous versions 8, which stems from contains a code injection vulnerability that allows a low-privileged user to overwrite files o...

Veeam Service Provider Console security vulnerabilities

Veeam Service Provider Console is a cloud-enabled platform from Veeam USA. A security vulnerability exists in Veeam Service Provider Console version 8.0.0.19552 and previous versions 8, which stems from the inclusion of a code injection vulnerability that allows a low privileged user with REST AP...

Veeam Service Provider Console security vulnerabilities

Veeam Service Provider Console is a cloud-enabled platform from Veeam USA. A security vulnerability exists in Veeam Service Provider Console version 8.0.0.19552 and previous versions 8, which stems from the inclusion of an authentication bypass vulnerability that could allow a low-privileged...

Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in IBM® License Key Server(CVE-2023-50945 and CVE-2023-50946)

Summary A vulnerability in IBM License Key Server Administration and Reporting Tool, and Agent allowed users' stored passwords to be exposed through the browser's console. This issue could potentially lead to unauthorized access to user accounts if an attacker gained access to the logged-in user'...

openSUSE Security Advisory (SUSE-SU-2024:3091-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM MQ Console is affected by a security bypass vulnerablity (CVE-2024-40681)

Summary IBM MQ has addressed a security bypass vulnerability in the IBM MQ Console. Vulnerability Details CVEID:CVE-2024-40681 DESCRIPTION: IBM MQ could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager. CVSS...

PT-2024-5947 · Veeam · Veeam Service Provider Console

Name of the Vulnerable Software and Affected Versions: Veeam Service Provider Console VSPC affected versions not specified Description: The issue is related to a code injection vulnerability that allows a low-privileged user to upload arbitrary files to the server, leading to remote code executio...

PT-2024-6330 · Veeam · Veeam Service Provider Console

Name of the Vulnerable Software and Affected Versions: Veeam Service Provider Console VSPC affected versions not specified Description: An authentication bypass issue can allow a low-privileged attacker to access the NTLM hash of a service account on the VSPC server. This is related to insufficie...

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2024:3109-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3109-1 advisory. Update to version 2.44.3 bsc1228696 bsc1228697 bsc1228698: - Fix web process cache suspend/resum...