12970 matches found
CVE-2024-7631
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...
Absolute Secure Access 安全漏洞
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in Absolute Secure Access versions prior to 13.53, which stems from a cross-site scripting vulnerability in the Secure...
Absolute Secure Access 安全漏洞
Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in Absolute Secure Access versions prior to 13.53, which stems from a cross-site scripting vulnerability in the Secure...
RockyLinux 9 : bluez (RLSA-2024:9413)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9413 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP Improper...
Red Hat OpenShift Console 路径遍历漏洞
Red Hat OpenShift Console is an OpenShift console from Red Hat, Inc. A path traversal vulnerability exists in Red Hat OpenShift Console that stems from an insecure file path construction, which could allow an authenticated user to retrieve an arbitrary JSON file on the console by manipulating the...
Cross-Site Scripting (XSS)
org.apache.felix, org.apache.felix.http.webconsoleplugin is vulnerable to cross-site scripting XSS. The vulnerability is due to improper neutralization of user input during web page generation, allowing an attacker to inject and execute malicious scripts in a victim’s browser through improperly...
Sytel Softdial Contact Center（Sytel SCC） 代码问题漏洞
Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A code issue vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from an unrestricted file upload in the /softdial/phpconsole/upload.php endpoint, which could lead to code executio...
PT-2025-18214 · Finit +1 · Finit +1
Name of the Vulnerable Software and Affected Versions: Finit versions 3.0-rc1 through 4.11 Description: Finit is a fast init for Linux systems. The issue concerns the implementation of getty for the tty configuration directive, which can bypass /bin/login, allowing a user to log in as any user...
WEM Agents are not listed in Console and failed to register
WEM Agents are not listed in Console and failed to register, Citrix WEM Agent Host Service Debug.log and Event Logs shows the below exception. ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient : System.ServiceModel.Security.SecurityNegotiationException : The caller was not authenticate...
While adding Active Directory Objects In WEM Console, Organizational Units list is empty
When try to add OU in WEM Administration Console - Active Directory Objects - Machines - Add OU option shows empty organizational unit list...
CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-21104
Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site 'Open Redirect' Vulnerability in NetWorker Management Console. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted applicatio...
InovaLogic CUSTOMER MONITOR 安全漏洞
InovaLogic CUSTOMER MONITOR is a sophisticated IT monitoring and management software from InovaLogic that significantly improves the reliability of IT infrastructure and simplifies remote IT systems. A security vulnerability exists in InovaLogic CUSTOMER MONITOR v3.1.757.1, which stems from...
CVE-2025-25598
CVE-2025-25598 : Inova Logic CUSTOMER MONITOR (CM) v3.1.757.1 has an incorrect access control issue in the scheduled tasks console that can lead to privilege escalation by placing a crafted executable into a scheduled task. The CVSS 3.1 data indicates Network attack vector, Low attack complexity,...
PT-2025-11167 · Dell · Dell Networker
Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.11.0.3 and below Description: The issue is an Open Redirect Vulnerability in NMC, which could allow an unauthenticated attacker with remote access to redirect a targeted application user to arbitrary web URLs. This...
March Microsoft Patch Tuesday
March Microsoft Patch Tuesday. 77 CVEs, 20 of which were added during the month. 7 vulnerabilities with signs of exploitation in the wild: RCE - Windows Fast FAT File System Driver CVE-2025-24985 RCE - Windows NTFS CVE-2025-24993 SFB - Microsoft Management Console CVE-2025-26633 EoP - Windows Win...
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...
CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...
