1104 matches found
CVE-2024-24272
The iTop DualSafe Password Manager & Digital Vault software (versions prior to 1.4.24 ) contains a vulnerability where sensitive credentials are leaked as plaintext in a log file. A local attacker can access this log file to obtain the sensitive information without requiring knowledge of the mast...
PT-2024-20332 · Itop · Itop Dualsafe Password Manager & Digital Vault
Name of the Vulnerable Software and Affected Versions: iTop DualSafe Password Manager & Digital Vault versions prior to 1.4.24 Description: An issue in the software allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by th...
CVE-2024-1195
A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally...
CVE-2024-1195
A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally...
Design/Logic Flaw
A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally...
CVE-2024-1195
CVE-2024-1195 pertains to iTop VPN (up to 4.0.0.1) with a vulnerability in the IOCTL Handler’s ITopVpnCallbackProcess.sys library. The issue arises from manipulation of an unknown functionality in this library, leading to denial of service. Vector is local access; attack complexity is low and pri...
CVE-2024-1195 iTop VPN IOCTL ITopVpnCallbackProcess.sys denial of service
A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally...
CVE-2024-1195 iTop VPN IOCTL ITopVpnCallbackProcess.sys denial of service
A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally...
PT-2024-17361 · Itop Vpn · Itop Vpn
Name of the Vulnerable Software and Affected Versions: iTop VPN versions up to 4.0.0.1 Description: A critical vulnerability was found in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler, affecting an unknown functionality. The manipulation leads to denial of service. The...
iTop VPN Security Breach
iTop VPN is a VPN software from iTop. Allows users to remain anonymous and secure with advanced Salsa20 chacha20 256-bit encryption. A security vulnerability exists in iTop VPN version 4.0.0.1 and earlier, which originates in ITopVpnCallbackProcess.sys in the component IOCTL Handler and can lead ...
CVE-2024-1195: Improper Resource Shutdown or Release
A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally...
PT-2024-13463
Name of the Vulnerable Software and Affected Versions iTop versions prior to 3.1.1 Description The issue concerns an IT service management platform where XSS attacks are possible when displaying or editing a user's personal tokens. Recommendations For versions prior to 3.1.1, update to version...
PT-2024-13193
Name of the Vulnerable Software and Affected Versions iTop versions prior to 2.7.10 iTop versions prior to 3.0.4 iTop versions prior to 3.1.1 Description iTop is an IT service management platform. The Dashlet edits "ajax endpoints" can be used to produce XSS. Recommendations For versions prior to...
PT-2024-13628
Name of the Vulnerable Software and Affected Versions iTop versions prior to 2.7.10 iTop versions prior to 3.0.4 iTop versions prior to 3.1.1 iTop versions prior to 3.2.0 Description iTop is an IT service management platform. Files from the env-production folder can be retrieved even though they...
PT-2024-13138
Name of the Vulnerable Software and Affected Versions iTop versions prior to 3.1.1 iTop versions prior to 3.2.0 Description iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value...
PT-2024-13627
Name of the Vulnerable Software and Affected Versions iTop versions prior to 2.7.9 iTop versions prior to 3.0.4 iTop versions prior to 3.1.1 iTop versions prior to 3.2.0 Description iTop is an IT service management platform. When exporting data from backoffice or portal in CSV or Excel files,...
PT-2024-13287
Name of the Vulnerable Software and Affected Versions iTop versions prior to 2.7.10 iTop versions prior to 3.0.4 iTop versions prior to 3.1.1 iTop versions prior to 3.2.0 Description iTop is an IT service management platform. When creating or updating an object, extkey values aren't checked to be...
CVE-2023-47489
CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components...
CVE-2023-47488
Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attribmanagerid parameter in the General Information page and the id parameter in the contact page...