CVE-2023-46584

SQL Injection vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint...

CVE-2023-45990

Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges...

Nipah virus Testing Management System SQL Injection Vulnerability

Nipah virus Testing Management System is an online virus diagnostic platform. A security vulnerability exists in version v.1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from the presence of a SQL injection vulnerability that allows remote attackers to escalate privilege...

The vulnerability of the VMware Aria Operations for Logs network log analysis tool, related to the restoration of unreliable data in memory, allows a perpetrator to escalate their privileges.

The vulnerability of the VMware Aria Operations for Logs network log analysis tool is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the SSL VPN Tunnel component of the SonicOS operating system, which allows a intruder to increase their privileges

The vulnerability of the SSL VPN Tunnel component of the SonicOS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

IXP Data EasyInstall Encryption Problem Vulnerability

IXP Data EasyInstall is a remote management and deployment suite from IXP Data. A security vulnerability exists in IXP Data EasyInstall version 6.6.14907.0. An attacker can escalate privileges by exploiting the vulnerability...

The vulnerability of the Apache Oozie data processing automation system, Azure HDInsight, allows attackers to escalate their privileges.

The vulnerability of the Apache Oozie data processing automation system, used in Azure HDInsight analytics services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the hmac.compare_digest function in the Lib/hmac.py library of the Python interpreter allows a attacker to enhance their privileges.

The vulnerability of the hmac.comparedigest function in the Lib/hmac.py library of the Python interpreter is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the HP LIFE mobile application for Android, related to information disclosure, allows attackers to increase their privileges.

The vulnerability of the HP LIFE mobile application for Android relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2023-43960

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component...

D-Link DPH-400SE Security Vulnerability

The D-Link DPH-400SE is an IP phone from China AUO D-Link. A security vulnerability exists in the D-Link DPH-400SE FRU version 2.2.15.8, which originated from a vulnerability that allows remote attackers to escalate privileges via the user modification feature in the Maintenance/Access feature...

The vulnerability of the Pure Storage Purity software for managing flash drives is related to deficiencies in access control, allowing attackers to increase their privileges.

The vulnerability of the Pure Storage Purity flash storage controller software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

PT-2023-29051 · D Link · Dlink Dph-400Se

Name of the Vulnerable Software and Affected Versions: DLINK DPH-400SE FRU version 2.2.15.8 Description: An issue in the software allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component. Recommendations: For DLINK DPH-400SE FRU...

Advisory ROSA-SA-2023-2240

software: pcs 0.10.7 WASP: ROSA-CHROME packageevrstring: pcs-0.10.7-3.src.rpm CVE-ID: CVE-2022-2735 BDU-ID: 2022-05554 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the corosync/pacemaker PCS configuration utility is related to flaws in the authentication procedure. Exploitation of the vulnerabili...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of backup and data recovery software on computers and servers is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the absence of an authentication procedure, which allows attackers to increase their privileges.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS), a global network firewall management system, stems from the rigid encoding of application Tomcat’s configuration files. This allows attackers to exploit their privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network management system is related to the rigid encoding of application Tomcat’s configuration files. Exploiting this vulnerability can allow a malicious actor to increase their...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to lack of access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...