19079 matches found
PT-2024-30295 · Automationdirect · Directlogic H2-Dm1E +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a session hijacking attack targeting the application layer's control mechanism. This mechanism manages authenticated sessions between...
CVE-2024-6510
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510
AVG Internet Security for Windows v24 is affected by a local privilege escalation described as COM-Hijacking. The issue enables a local unprivileged user to escalate to SYSTEM through compromised COM interactions. Affected component/behavior and root cause are described in multiple sources (inclu...
CVE-2024-6510 Local privilege escalation vulnerability in AVG Internet Security
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510 Local privilege escalation vulnerability in AVG Internet Security
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
Security Bulletin: IBM Concert Software is vulnerable to session hijacking (CVE-2024-43180)
Summary IBM Concert cookie settings are vulnerable to session hijacking. Vulnerability Details CVEID:CVE-2024-43180 DESCRIPTION: IBM Concert does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a...
AVG Internet Security 安全漏洞
AVG Internet Security is an antivirus from AVG. A security vulnerability exists in versions prior to AVG Internet Security v24 that stems from the presence of a local elevation of privilege that allows a local, unprivileged user to elevate privileges to SYSTEM via COM hijacking...
3DSecure 2.0 3DS Method Authentication Cross Site Scripting
Product: 3DSecure 2.0 Manufacturer: Redsys Affected Versions: 3DSecure 2.0 3DS Method Authentication Tested Versions: 3DSecure 2.0 3DS Method Authentication Vulnerability Type: Cross-Site Scripting XSS Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solutio...
PT-2024-6221 · Avg · Avg Internet Security
Name of the Vulnerable Software and Affected Versions: AVG Internet Security version v24 Description: A local privilege escalation issue in AVG Internet Security allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking. This issue is related to the use of dangerous...
CVE-2024-7312
A flaw was found in the Payara Server REST Management Interface modules. This vulnerability allows session hijacking via URL redirection to an untrusted site. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2024-7312
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server REST Management Interface modules allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before...
CVE-2024-7312
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server REST Management Interface modules allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before...
CVE-2024-7312 REST Interface Link Redirection via Host parameter
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server REST Management Interface modules allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before...
CVE-2024-7312
CVE-2024-7312 affects Payara Server (REST Management Interface modules) with an Open Redirect leading to potential session hijacking. Multiple versions are impacted: 4.1.2.191.0–4.1.2.191.50, 5.20.0–5.67.0, 5.2020.2–5.2022.5, 6.0.0–6.18.0, and 6.2022.1–6.2024.9. Root cause is URL redirection to u...
CVE-2024-7312 REST Interface Link Redirection via Host parameter
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server REST Management Interface modules allows Session Hijacking.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.2020.2 before 5.2022.5, from 5.20.0 before...
PT-2024-38258 · Payara · Payara Server
Name of the Vulnerable Software and Affected Versions: Payara Server versions 4.1.2.191.0 through 4.1.2.191.50 Payara Server versions 5.20.0 through 5.67.0 Payara Server versions 5.2020.2 through 5.2022.5 Payara Server versions 6.0.0 through 6.18.0 Payara Server versions 6.2022.1 through 6.2024.9...
CVE-2024-44107
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...