454 matches found
PT-2023-4110 · Abb · Abb Ability Zenon
Name of the Vulnerable Software and Affected Versions: ABB Ability zenon versions 11 build through 11 build 106404 Description: A vulnerability exists in the ABB Ability zenon system, allowing low-privileged users to read and update data in various directories. This issue is related to errors in...
CVE-2023-22027
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2023-3582 Lack of channel membership check when linking a board to a channel
Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to,...
Sql injection
An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version 2023.2, allowing low privileged users to inject arbitrary SQL directives into an SQL query and execute arbitrary SQL commands and get full reading access. This may also lead to...
CVE-2023-29927
Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, particularly those on a workstation setup in the "Windows Peer-to-Peer Network" or "Client Server Network" Sage 300 configurations, could recover the SQL connectio...
GiveWP < 2.25.2 - Contributor+ Arbitrary Content Deletion
The plugin does not correctly authorize some actions, allowing low-privileged users to delete content from the site which they should not be permitted to delete...
CVE-2023-0078 Resume Builder <= 3.1.1 - Subscriber+ Stored XSS
The Resume Builder WordPress plugin through 3.1.1 does not sanitize and escape some parameters related to Resume, which could allow users with a role as low as subscriber to perform Stored XSS attacks against higher privilege users...
GO-2023-1549 Improper input validation in github.com/openshift/apiserver-library-go
Low-privileged users can set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint SCC is "runtime/default," allowing users to disable seccomp for pods they can create and modify...
Denial Of Service (DoS)
virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...
Denial Of Service (DoS)
virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...
Denial Of Service (DoS)
virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...
Denial Of Service (DoS)
virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...
github.com/openshift/apiserver-library-go Improper Input Validation vulnerability
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...
Design/Logic Flaw
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...
CVE-2023-0229
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...
PT-2023-1587 · Dell · Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the disclosure of sensitive information through log files in the IPMI interface of the PowerScale OneFS operating system. A low-privileged user with...
Code injection
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...
CVE-2022-42903
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...
