CVE-2024-47476

CVE-2024-47476 concerns Dell NetWorker Management Console (version 19.11). The vulnerability is an improper verification of cryptographic signatures, which could allow an unauthenticated, locally privileged attacker to execute code on affected systems. Connected sources consistently describe the ...

CVE-2024-42422: Authorization Bypass Through User-Controlled Key

Dell NetWorker, versions 19.10, contains an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-47476: Improper Verification of Cryptographic Signature

Dell NetWorker Management Console, versions 19.11, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Dell NetWorker Management Console 安全漏洞

Dell NetWorker Management Console is a backup and recovery software from Dell USA. A trust management issue vulnerability exists in Dell NetWorker Management Console version 19.11, which stems from the presence of improper cryptographic signature validation, and can be exploited by an attacker to...

PT-2024-29937 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker version 19.10 Description: The issue is an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

Dell NetWorker 安全漏洞

Dell NetWorker is an application from Dell USA Inc. It provides forum discussion capabilities for Dell Inc. A security vulnerability exists in Dell NetWorker version 19.10, which stems from a key vulnerability in which authorization bypasses user control, which could easily lead to information...

The vulnerability of the NetWorker Client (nsrexecd) component of the Dell EMC NetWorker backup and recovery system allows a attacker to execute arbitrary code.

The vulnerability of the NetWorker Client nsrexecd component of the Dell EMC NetWorker backup and recovery system is related to improper code generation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2024-2962

The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminreloadnavmenu function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to...

CVE-2024-2962 Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization

The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminreloadnavmenu function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to...

CVE-2024-2962

CVE-2024-2962 affects the Networker - Tech News WordPress Theme with Dark Mode. The vulnerability arises from a missing capability check in the admin_reload_nav_menu() function, affecting all versions up to and including 1.1.9. This allows unauthenticated attackers to modify the location of displ...

CVE-2024-2962: Missing Authorization

The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the adminreloadnavmenu function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to...

WordPress Networker Theme <= 1.1.9 is vulnerable to Broken Access Control

Software Networker Type Theme Vulnerable versions = 1.1.9 Fixed in 1.1.10 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2962 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID c70a9d136cac Credits Muhammad Zeeshan Xib3rR4dAr Required...

WordPress Theme Networker 安全漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress Theme Networker 1.1.9 and earlier versions, which stems...

The vulnerability of the Dell EMC NetWorker backup and data recovery system, related to insufficient protection of registration data, allows a perpetrator to obtain user registration data.

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the insufficient protection of registration data. Exploiting these vulnerabilities could allow attackers to obtain user registration data...

Dell NetWorker Information Disclosure Vulnerability

Dell NetWorker is an application from Dell USA Inc. Provides forum discussion features for Dell Inc. An information disclosure vulnerability exists in Dell NetWorker, which arises from the database storing plain text passwords in a temporary configuration file during backups, and can be exploited...

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

Design/Logic Flaw

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...