2545 matches found
ABB Abilit zenon 安全漏洞
ABB Abilit zenon is a secure operational data management platform from ABB that makes it easy to connect machines, infrastructure and production assets. A security vulnerability exists in ABB Abilit zenon build 11 through 11 build 106404, which stems from a vulnerability that allows a...
CVE-2021-45094
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
CVE-2021-45094
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
Cross site scripting
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2023-32482
Dell Wyse Management Suite is affected by an improper authorization vulnerability (CVE-2023-32482) where an authenticated user with privileged access can push policies to unauthorized tenant groups. The CVE entry indicates affected software: Wyse Management Suite versions prior to 4.0; the CNVD/D...
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2021-45094
Imprivata Privileged Access Management (formerly Xton Privileged Access Management) version 2.3.202112051108 contains a cross-site scripting (XSS) vulnerability. The issue is documented across multiple sources (NVD/CNNVD and related catalogs). The available data confirms the vulnerability title a...
CVE-2021-45094
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
CVE-2021-45094
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
Low: perl-HTTP-Daemon
Issue Overview: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based...
CVE-2023-22046
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2023-22008
CVE-2023-22008 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.33 and earlier. An attacker with network access through multiple protocols and high privileges can cause a hang or frequent crash (DoS) of MySQL Server (CVSS 4.9, AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Connected sourc...
CVE-2023-23777
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.18 and below may allow a privileged attacker to execute arbitrary bash commands via crafted cli backup parameters...
Mastodon Social Network Patches Critical Flaws Allowing Server Takeover
Mastodon, a popular decentralized social network, has released a security update to fix critical vulnerabilities that could expose millions of users to potential attacks. Mastodon is known for its federated model, consisting of thousands of separate servers called "instances," and it has over 14...
CVE-2023-35974
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2023-21641
CVE-2023-21641 concerns Qualcomm display-related code. A local attacker with non-privileged access can change the device’s global brightness, leading to undesired system behavior. The vulnerability is categorized as Moderate in Qualcomm/Pixel entries, and public documentation indicates exposure i...