9957 matches found
The vulnerability of the monitoring, control, automation, and management tool for IBM Cloud Pak for Multicloud Management Monitoring lies in its deserialization mechanism flaws, which allows attackers to execute arbitrary commands.
The vulnerability of the monitoring, control, automation, and management tool for IBM Cloud Pak for Multicloud Management lies in the shortcomings of the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted...
CVE-2024-53159
In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Fix overflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtoul results in an overflow if a large number such as 18446744073709551615 is provided by the user. Fix it by reordering clampval and...
CVE-2024-12814
creationtimestamp| type| source ---|---|--- 2024-12-24 07:05:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113706528430346312 2024-12-24 07:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzvkbckwp2k 2024-12-24 09:23:07+00:00| seen|...
CVE-2024-11808 Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting
The Pingmeter Uptime Monitoring plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpnonce' parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-11808
CVE-2024-11808 (Pingmeter Uptime Monitoring, WordPress) is a reflected XSS vulnerability in the Pingmeter Uptime Monitoring plugin for WordPress through the _wpnonce parameter, affecting all versions up to 1.0.3. The authenticated/unauthenticated risk is described as an attacker tricking a user i...
WordPress plugin Pingmeter Uptime Monitoring 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2024-17264 · WordPress · Pingmeter Uptime Monitoring
Name of the Vulnerable Software and Affected Versions: Pingmeter Uptime Monitoring plugin for WordPress versions up to, and including, 1.0.3 Description: The issue is related to Reflected Cross-Site Scripting via the wpnonce parameter due to insufficient input sanitization and output escaping. Th...
WordPress Pingmeter Uptime Monitoring plugin <= 1.0.3 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Pingmeter Uptime Monitoring versions = 1.0.3...
CVE-2024-56349
creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576577778407 2024-12-20 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj2ymkh2s 2024-12-20 16:44:55+00:00| seen|...
CVE-2024-11783
creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptoyawkf2m 2024-12-20 07:20:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683939071218514 2024-12-20 09:13:23+00:00| seen|...
The vulnerability of the “Evaluations” function of the monitoring, management, and improvement platform for LLM applications allows attackers to influence the integrity of the protected information.
The vulnerability of the “Evaluations” function in the platform for monitoring, managing, and improving LLM applications involves bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely influence the integrity of protected information ...
GHSA-W32M-9786-JP63 vulnerabilities
Vulnerabilities for packages: cortex-fips, kyverno-policy-reporter, kapp-controller, prometheus-alertmanager-fips, apache-beam-java-sdk, aws-network-policy-agent-fips, frp, cloud-provider-aws, promxy-fips, envoy-gateway, lvm-driver, pulumi-language-dotnet, sftpgo-plugin-geoipfilter,...
PT-2024-9675
Name of the Vulnerable Software and Affected Versions Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description A relative path traversal vulnerability in Fortinet FortiWLM allows an attacker to execute unauthorized code or commands via specially...
BIT-NODE-MIN-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...
The vulnerability of the WhatsUp Gold network infrastructure monitoring system, related to errors when using privileged application programming interfaces (APIs), allows a hacker to execute arbitrary code.
The vulnerability of the WhatsUp Gold network infrastructure monitoring system is related to errors when privileged application programming interfaces APIs are used. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the WhatsUp Gold network infrastructure monitoring system lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to user data.
The vulnerability of the WhatsUp Gold network infrastructure monitoring system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to user accounts...
ROS-20241216-03
A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...
ROS-20241216-05
A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...
ROS-20241216-06
A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...