10978 matches found
Peering Manager Security Vulnerability
Peering Manager is a BGP session management tool. A security vulnerability exists in Peering Manager 1.8.2 and prior versions that stems from the presence of a server template injection vulnerability. An attacker can exploit this vulnerability to execute remote code...
PT-2024-17887 · Badger Meter · Badger Meter Monitool
Name of the Vulnerable Software and Affected Versions: Badger Meter Monitool versions prior to 4.6.3 Description: The issue allows an authenticated attacker to retrieve any file from the device using the download-file functionality due to incorrectly limiting the path to a restricted directory...
PT-2024-22351 · Vela · Vela
Name of the Vulnerable Software and Affected Versions: Vela versions prior to 0.23.2 Description: Vela pipelines can use variable substitution combined with insensitive fields like parameters, image, and entrypoint to inject secrets into a plugin/image and bypass log masking, exposing secrets...
CVE-2024-23611
An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions...
Out-of-bounds
An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions...
PT-2024-19966 · National Instruments · Labview
Name of the Vulnerable Software and Affected Versions: LabVIEW versions prior to 2024 Q1 Description: An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI...
PT-2024-3056 · Libreswan +6 · Libreswan +6
Name of the Vulnerable Software and Affected Versions: libreswan versions prior to 4.14 Description: The issue causes libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret and the connection cannot find a matching configured...
PT-2024-8898 · Intel · Intel Distribution For Gdb
Name of the Vulnerable Software and Affected Versions: Intel Distribution for GDB versions prior to 2024.0.1 Description: The issue is related to insufficient input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For...
PT-2024-16455 · WordPress · 404 Solution Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The 404 Solution WordPress plugin versions prior to 2.35.8 Description: The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be...
Exploit for Cross-site Scripting in Sygnoos Popup_Builder
CVE-2023-6000 PoC How does this detection method work?...
PT-2024-12488
Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.5.4.2627 build 20231225 QNAP QuTS hero versions prior to h4.5.4.2626 build 20231225 Description An OS command injection issue has been reported, affecting several QNAP operating system versions. If exploited, this...
PT-2024-13429 · Synology · Photo Station
Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.4.2 Description: A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and...
Numbas security breach
Numbas is an open source system by Numbas Open Source. A security vulnerability exists in versions prior to Numbas 7.3 that stems from mishandling of reads to themes and extensions...
PT-2024-19789 · Visionos · Visionos
Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 Description: A permissions issue was addressed to help ensure Personas are always protected. An unauthenticated user may be able to use an unprotected Persona. Recommendations: For versions prior to 1.1, update ...
Veritas NetBackup Security Vulnerability
Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies. A security vulnerability exists in Veritas NetBackup versions prior to 8.1.2, and NetBackup versions prior to 3.1.2, which originates from a failure of the BPCD process...
PT-2024-19727 · Apple · Macos Sonoma +1
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially capture a user's screen. Recommendations: For macOS Sonoma versions prior to 14....
PT-2024-22264 · Schoolbox · Schoolbox
Name of the Vulnerable Software and Affected Versions: Schoolbox versions prior to 23.1.3 Description: The issue concerns stored cross-site scripting in the calendar functionality, allowing an authenticated attacker to perform security actions in the context of affected users. Recommendations: Fo...
PT-2024-22263 · Schoolbox · Schoolbox
Name of the Vulnerable Software and Affected Versions: Schoolbox versions prior to 23.1.3 Description: The issue concerns stored cross-site scripting in the Class functionality of the Schoolbox application. This allows an authenticated attacker to perform security actions in the context of affect...
PT-2024-3068 · Unknown · Openmetadata
Name of the Vulnerable Software and Affected Versions: OpenMetadata versions prior to 1.2.4 Description: The issue is related to the AlertUtil::validateExpression method, which evaluates an SpEL expression using getValue with the StandardEvaluationContext, allowing interaction with Java classes...