854 matches found
CVE-2023-50916
CVE-2023-50916 affects Kyocera Device Manager versions prior to 3.1.1213.0. The issue enables NTLM credential exposure during UNC path authentication when the backup location for the application database is configured to a UNC path. The GUI rejects UNC paths due to a backslash check, but intercep...
PT-2023-8650 · Kyocera · Kyocera Device Manager
Name of the Vulnerable Software and Affected Versions: Kyocera Device Manager versions prior to 3.1.1213.0 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation may allow a remote attacker to bypass the authentication process. The...
PT-2023-8690 · Unknown · Scalefusion
Name of the Vulnerable Software and Affected Versions: ScaleFusion versions 10.5.2 through 10.5.6 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, which can allow an attacker to escape from an isolated software environment. Specifically, in version...
CVE-2023-41344
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
CVE-2023-41356
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
CVE-2023-41356
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
CVE-2023-41356 WisdomGarden Tronclass ilearn - Path Traversal
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
CVE-2023-41356 WisdomGarden Tronclass ilearn - Path Traversal
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
CVE-2023-41356
CVE-2023-41356 concerns the ManageEngine Mobile Device Manager (MDM) APP and describes a path traversal vulnerability in a special function. An unauthenticated remote attacker can bypass authentication and read arbitrary system files. The NVD entry lists a CVSSv3.1 base score of 6.5 (Medium) with...
CVE-2023-41344 NCSIST ManageEngine MDM - Path Traversal
NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...
NCSIST ManageEngine Mobile Device Manager Security Vulnerability
NCSIST ManageEngine Mobile Device Manager NCSIST ManageEngine MDM is a mobile device manager organized by China's National Institute of Zhongshan Science and Technology NCSIST. A security vulnerability exists in NCSIST ManageEngine Mobile Device Manager that stems from a path traversal...
PT-2023-27924 · Zoho · Manageengine Mobile Device Manager
Name of the Vulnerable Software and Affected Versions: ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the ManageEngine Mobile Device ManagerMDM APP. This vulnerability can be...
PT-2023-27917 · Zoho · Manageengine Mobile Device Manager
Name of the Vulnerable Software and Affected Versions: NCSIST ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the NCSIST ManageEngine Mobile Device ManagerMDM APP. This...
CVE-2023-42644
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: plutono-fips, bank-vaults-fips, aactl, prometheus-blackbox-exporter, prometheus-stackdriver-exporter, kube-oidc-proxy, terraform-provider-sendgrid, kiam, buildkitd, conftest-fips, k3d, kubeflow-fips, spark-operator, src, timestamp-authority-fips,...
HP Device Manager Security Updates
Previous versions of HP Device Manager prior to HPDM 5.0.11 could potentially contain security vulnerabilities. HP has released HP Device Manager 5.0.11, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as pa...
CVE-2023-39323 vulnerabilities
Vulnerabilities for packages: smarter-device-manager-fips, kind, metrics-server, configmap-reload-fips, kubeflow-katib...
CVE-2023-43131
General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow...