5637 matches found
CVE-2023-50946
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism...
CVE-2023-50946 IBM Common Licensing information disclosure
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism...
CVE-2023-50946 IBM Common Licensing information disclosure
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism...
CVE-2023-50946: Incorrect Authorization
IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism...
IBM Common Licensing 安全漏洞
IBM Common Licensing is a license management solution from International Business Machines IBM. A security vulnerability exists in IBM Common Licensing version 9.0 that originates from allowing an authenticated user to modify a configuration file that is inaccessible due to a broken authorization...
AlmaLinux 9 : java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5 (Medium) (ALSA-2025:0422)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0422 advisory. JDK: Enhance array handling CVE-2025-21502 Bug Fixes: The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new...
CVE-2025-24337
WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...
CVE-2025-0485
CVE-2025-0485 — Fanli2012 native-php-cms 1.0 is affected. An unknown function in /fladmin/sysconfig_doedit.php is susceptible to cross-site scripting via manipulation of the argument info. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. No remediation det...
CVE-2024-52783
Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
PT-2025-2934
Name of the Vulnerable Software and Affected Versions XINJE XDPPro.exe versions 3.2.2 through 3.7.17c Description Insecure permissions in the XNetSocketClient component allow attackers to execute arbitrary code via modification of the configuration file. Recommendations For versions 3.2.2 through...
CVE-2024-52783
The USB port connection programming software XINJE XDPPro.exe (versions 3.2.2 through 3.7.17c ) is vulnerable to arbitrary code execution due to insecure permissions within the XNetSocketClient component. An attacker can achieve this by modifying the software's configuration file. To mitigate thi...
Atlassian Confluence < 7.19.18 / 8.5.x < 8.5.5 / 8.7.x < 8.7.2 / 8.8.0 (CONFSERVER-98413)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-98413 advisory: - Affected versions of Atlassian Confluence Data Center in Windows installations contain a security misconfiguration in which the confluence.cfg.xml...
CVE-2024-52783
Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file...
CVE-2024-52783: Incorrect Default Permissions
Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file...
CVE-2024-52783
Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file...
CVE-2024-12398
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00ACLE.3 and WBE660S firmware versions through 6.70ACGG.2 could allow an authenticated user with limited privileges to escalate their privileges to that of an...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
CVE-2024-12398: Improper Privilege Management
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00ACLE.3 and WBE660S firmware versions through 6.70ACGG.2 could allow an authenticated user with limited privileges to escalate their privileges to that of an...