ROS-20240329-23

The vulnerability in the interface of Zabbix universal monitoring system is related to insufficient input data validation when processing the URL field of Maps element. data when processing the URL field of the Maps element. Exploitation of the vulnerability could allow an attacker, acting...

Dell InsightIQ Access Control Error Vulnerability

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. An Access Control Error vulnerability exists in Dell InsightIQ version 5.0, which stems from incorrect access control in the application and can be exploited by an attacker to gain unauthorized access to monitoring data...

WordPress FG PrestaShop to WooCommerce Plugin <= 4.45.1 is vulnerable to Sensitive Data Exposure

Software FG PrestaShop to WooCommerce Type Plugin Vulnerable versions = 4.45.1 Fixed in 4.47.0 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-30511 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d7bd1db6d6b7...

WordPress Paid Memberships Pro – Payfast Gateway Add On Plugin <= 1.4.1 is vulnerable to Sensitive Data Exposure

Software Paid Memberships Pro – Payfast Gateway Add On Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-30514 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...

ROS-20240328-05

Vulnerability of icmpping function of Zabbix universal monitoring system is related to errors in input data processing. of input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code Vulnerability of the smart.disk.get edent of the Zabbix...

CVE-2024-25962

Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...

CVE-2024-25962

Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...

CVE-2024-25962

Dell InsightIQ 5.0 has an improper access control vulnerability that could allow a remote low-privileged attacker to gain unauthorized access to monitoring data. The root cause is an incorrect access control mechanism within the application. Documented impacts include potential exposure of monito...

CVE-2024-25962

Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...

CVE-2024-25962

Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to monitoring data...

Dell InsightIQ 访问控制错误漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. An Access Control Error vulnerability exists in Dell InsightIQ version 5.0, which stems from incorrect access control in the application and can be exploited by an attacker to gain unauthorized access to monitoring data...

Janitza GridVis 安全漏洞

Janitza GridVis is a grid monitoring software from Janitza. A security vulnerability exists in Janitza GridVis version 9.0.66 and prior versions that stems from the use of hard-coded credentials...

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures, allowing attackers to execute arbitrary SQL queries against the database.

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

CVE-2024-29666

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component...

CVE-2024-30156

A flaw was found in the Varnish cache server, with HTTP/2 support enabled, that may allow a Denial of Service type of attack. A malicious actor can cause the server to run out of credits during the HTTP/2 connection control flow. As a consequence, the server will stop to properly process the acti...

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

The Iran-affiliated threat actor tracked as MuddyWater aka Mango Sandstorm or TA450 has been linked to a new phishing campaign in March 2024 that aims to deliver a legitimate Remote Monitoring and Management RMM solution called Atera. The activity, which took place from March 7 through the week o...

PT-2024-22955 · Cmsv6 · Cmsv6

Name of the Vulnerable Software and Affected Versions: Vehicle Monitoring platform system CMSV6 versions 7.31.0.2 through 7.32.0.3 Description: The issue allows a remote attacker to escalate privileges via the default password component. This is an Insecure Permissions vulnerability...

CVE-2024-29666

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component...

CVE-2024-29666

CMSV6 Vehicle Monitoring platform (CMSV6) versions 7.31.0.2 through 7.32.0.3 contain an Insecure Permissions flaw that allows a remote attacker to escalate privileges via the default password component. Root cause is improper privilege management related to the default password mechanism. Red Hat...

Kickdler 安全漏洞

Kickdler is an employee monitoring software from Kickdler Inc. that explores employee computer activity levels to improve productivity and find growth. A security vulnerability exists in versions prior to Kickdler v1.107.0 that stems from the presence of a Reflected Cross-Site Scripting XSS...