8372 matches found
CVE-2024-35151
IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs...
CVE-2024-43813 IDOR when marking read a user's channel
Mattermost versions 9.5.x = 9.5.7, 9.10.x = 9.10.0 fail to enforce proper access controls which allows any authenticated user, including guests, to mark any channel inside any team as read for any user...
Avtec Outpost 0810
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Avtec Equipment : Outpost 0810, Outpost Uploader Utility Vulnerability : Storage of File with Sensitive Data Under Web Root, Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful...
Rockwell Automation ThinManager ThinServer Arbitrary File Read Information Disclosure Vulnerability
This vulnerability allows local attackers to read arbitrary files on affected installations of Rockwell Automation ThinManager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
PT-2024-30675 · Mattermost · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.7 Mattermost versions 9.10.x through 9.10.0 Description: The issue is related to improper access controls, allowing any authenticated user, including guests, to mark any channel inside any team as read fo...
PT-2024-28670 · Avtec · Avtec Outpost
Name of the Vulnerable Software and Affected Versions: Avtec Outpost affected versions not specified Description: The issue concerns the storage of sensitive information in an insecure location without proper access controls in place. Recommendations: At the moment, there is no information about ...
Fraudulent Slack ad shows malvertiser’s patience and skills
In the past year alone, we have reported almost five hundred unique malvertising incidents related to Google search ads. While it can be difficult to attribute each incident to a specific threat actor, we usually notice similarities between campaigns. Some malvertisers go to great lengths to bypa...
The vulnerability of the industrial server for serial devices of Korenix JetPort, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.
The vulnerability of the industrial server for serial devices of Korenix JetPort is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
Joomla 3.0.x < 3.10.17 / 4.0.x < 4.4.7 / 5.0.x < 5.1.3 Multiple Vulnerabilities (5910-joomla-5-1-3-and-4-4-7-security-and-bug-fix-release)
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.10.17, 4.0.x prior to 4.4.7, or 5.0.x prior to 5.1.3. It is, therefore, affected by multiple vulnerabilities. - Inadequate validation of URLs could result into an invalid check...
The vulnerability of the industrial server for serial devices of Korenix JetPort, related to the lack of measures taken to clean data at the management level, allows attackers to circumvent existing security restrictions.
The vulnerability of the industrial server for serial devices of Korenix JetPort is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
CVE-2024-41773
IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...
CVE-2024-41773
IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...
CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment
IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...
CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment
IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...
CVE-2024-41773
CVE-2024-41773 affects IBM Global Configuration Management (GCM) versions 7.0.2 and 7.0.3. The root cause is improper access controls that could allow an authenticated user to archive a global baseline. Public sources in the connected documents corroborate this description and assign a CVSS base ...
CVE-2024-27187
Improper Access Controls allows backend users to overwrite their username when disallowed...
CVE-2024-27187
Improper Access Controls allows backend users to overwrite their username when disallowed...
CVE-2024-27187
CVE-2024-27187 is an issue in Joomla! core: the vulnerability arises from improper access controls in the backend profile view, allowing backend users to overwrite their username when disallowed. This is documented across multiple sources (NVD, Red Hat, OSV, and Nessus/NASL references). The commo...