7328 matches found
DEBIAN-CVE-2024-9902
A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...
AZL-52417 CVE-2024-9902 affecting package ansible for versions less than 2.17.11-1
A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...
UBUNTU-CVE-2024-9902
A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
The CVE-2024-51528 issue concerns improper log printing in Huawei’s Super Home Screen module (HarmonyOS/EMUI). Affected component: Super Home Screen module; root cause: improper log handling leading to confidentiality exposure. Exploitation vector: local access, low complexity, no user interactio...
Enel X Waybox 安全漏洞
The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox Pro version 3.0, which stems from the ability to bypass Web Management API authentication and provide administrator rights to the Waybox system...
PT-2024-34692 · Unknown · Super Home Screen Module
Name of the Vulnerable Software and Affected Versions: Super Home Screen module affected versions not specified Description: The issue concerns improper log printing in the Super Home Screen module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the...
Enel X Waybox 安全漏洞
Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from a web management application that can be used to execute arbitrary operating system commands and provide administrator privileges to the Waybox system...
Enel X Waybox 安全漏洞
The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in version 3.0 of the Enel X Waybox that stems from the fact that the TCF proxy service can be used to gain administrator privileges on the Waybox system...
SUSE CVE-2024-36814
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory...
Chamilo LMS 安全漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.26, which stems...
PT-2024-21932 · Unknown · Chamilo Lms
Name of the Vulnerable Software and Affected Versions: Chamilo LMS version 1.11.26 Description: A Cross Site Scripting issue allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component. Recommendations: For Chamilo LMS version 1.11.26,...
PT-2024-22238 · Wbr-6012 · Wbr-6012
Name of the Vulnerable Software and Affected Versions: WBR-6012 affected versions not specified Description: The WBR-6012 is a wireless SOHO router that functions as an internet gateway for homes and small offices. It provides a WiFi access point and serves as a 4-port wired router, implementing...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
CVE-2024-10327
A vulnerability in Okta Verify for iOS versions 9.25.1 beta and 9.27.0 including beta allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects...