Lucene search
+L

8760 matches found

NVD
NVD
added 2023/08/09 12:15 p.m.53 views

CVE-2023-32781

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...

7.2CVSS7AI score0.14261EPSS
SaveExploits3References3
NVD
NVD
added 2023/08/09 12:15 p.m.31 views

CVE-2023-32782

A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerabili...

7.2CVSS7.1AI score0.56159EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/09 12:15 p.m.9 views

CVE-2023-32781

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...

7.2CVSS5.8AI score0.14261EPSS
SaveExploits3References3
ATTACKERKB
ATTACKERKB
added 2023/08/09 12:15 p.m.83 views

CVE-2023-32781

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...

7.2CVSS7.1AI score0.14261EPSS
SaveExploits3References5
ATTACKERKB
ATTACKERKB
added 2023/08/09 12:15 p.m.7 views

CVE-2023-32782

A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerabili...

7.2CVSS7AI score0.56159EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/09 12:15 p.m.32 views

Command injection

A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerabili...

5.8CVSS7.1AI score0.56159EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/08/09 12:15 p.m.48 views

Command injection

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...

5.8CVSS7AI score0.14261EPSS
SaveExploits3References3Affected Software1
OSV
OSV
added 2023/08/09 9:15 a.m.9 views

CVE-2023-24471

An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normal...

6.5CVSS5.8AI score0.00482EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/09 9:15 a.m.20 views

Improper access control

An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normal...

4CVSS6.3AI score0.00482EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2023/08/09 8:54 a.m.63 views

CVE-2023-24471

CVE-2023-24471 is a vulnerability in Nozomi Networks Guardian/CMC prior to version 22.6.2 where access-control restrictions on actual assertions are not enforced in the debug functionality. An authenticated user with reduced visibility can access data normally restricted in the Query and Assertio...

7.1CVSS6.6AI score0.00482EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/08/09 8:54 a.m.17 views

CVE-2023-24471 Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2

An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normal...

7.1CVSS6.5AI score0.00482EPSS
SaveExploits0References1
NOZOMI
NOZOMI
added 2023/08/09 12:0 a.m.11 views

Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2

Summary An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. Impact An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data th...

7.1CVSS6.5AI score0.00482EPSS
SaveExploits0Affected Software2
Cvelist
Cvelist
added 2023/08/09 12:0 a.m.60 views

CVE-2023-32781

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...

7.2AI score0.14261EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.9 views

PT-2023-24016 · Prtg · Prtg

Name of the Vulnerable Software and Affected Versions: PRTG versions 23.2.84.1566 and earlier Description: A command injection issue was identified in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially...

7.2CVSS7.4AI score0.56159EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.7 views

PT-2023-19628 · Nozomi Networks · Cmc +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An access control issue was found due to restrictions not being enforced in the debug functionality. This allows an authenticated user with reduced visibility to obtain unauthorized...

7.1CVSS6.6AI score0.00482EPSS
SaveExploits0References5
Hacker One
Hacker One
added 2023/08/08 2:40 p.m.48 views

Nextcloud: user_ldap app logs user passwords in the log file on level debug

User passwords were logged in Nextcloud application logs when using LDAP authentication and debug log level settings...

4.4CVSS4.6AI score0.00246EPSS
SaveExploits1
Amazon
Amazon
added 2023/08/08 12:0 a.m.34 views

Medium: cups

Issue Overview: OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers...

7.5CVSS7AI score0.01461EPSS
SaveExploits1
Amazon
Amazon
added 2023/08/07 12:0 a.m.33 views

Medium: cups

Issue Overview: OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers...

7.5CVSS7.1AI score0.01461EPSS
SaveExploits1
Broadcom
Broadcom
added 2023/08/01 12:0 a.m.39 views

Hardware allows activation of test or debug logic

Hardware allows activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

6.8CVSS7AI score0.00407EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2023/07/30 12:0 a.m.11 views

TeleAdapt RoomCast TA-2400 Elevation of Privilege Vulnerability

The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability, which is caused by improper privilege management in the Android Debug Brid...

9.8CVSS7.1AI score0.00963EPSS
SaveExploits0References1
Rows per page
Query Builder