169 matches found
PT-2024-6216 · Ivanti · Ivanti Epm
Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update Description: The issue is related to a lack of authentication for a critical function in Ivanti EPM, specifically in Network Isolation. This allows a...
CVE-2024-41162
Mattermost server (versions 9.9.x up to 9.9.0, 9.5.x up to 9.5.6, 9.7.x up to 9.7.5, and 9.8.x up to 9.8.1) is affected by an access-control issue where a remote actor, when shared channels are enabled, can cause an arbitrary local channel to become read-only. Multiple sources (Red Hat, OSV, GitH...
CVE-2024-41162 Malicious remote can make an arbitrary local channel read-only
Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5 and 9.8.x = 9.8.1 fail to disallow the modification of local channels by a remote, when shared channels are enabled, which allows a malicious remote to make an arbitrary local channel read-only...
PT-2024-5346
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description The issue is related to insufficient access control in the admin compliance framework function of the Group Namespace URL Handler component in...
CVE-2024-35342: Missing Authentication for Critical Function
Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280,...
The vulnerability of the CMS system Netcat, related to the manipulation of inter-site requests, allows a hacker to alter access rights in the file manager.
The vulnerability of the CMS system Netcat is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to remotely modify access rights in the file manager...
The vulnerability of the NetApp SnapCenter backup and recovery software’s software platform, related to authentication deficiencies, allows a perpetrator to alter the configuration of system logging settings.
The vulnerability of the NetApp SnapCenter backup and recovery software platform relates to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to remotely alter the configuration of system logging settings...
The vulnerability of the SAP AS NetWeaver JAVA software for creating and deploying web applications lies in the lack of authentication for a critical function, allowing attackers to modify the state of existing services.
The vulnerability of the SAP AS NetWeaver JAVA software for creating and deploying web applications is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to remotely modify the state of existing services...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control. This allows a malicious individual to alter the headers of deployment keys.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in SSH key management during automated deployment scenarios. Exploiting this vulnerability could allow a malicious actor to modify the headers of deployment private keys...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 This script provides an automated Proof of C...
The vulnerability of the Solr software solution for enterprise resource planning by Apache OFBiz, which allows attackers to modify protected information
The vulnerability of the Solr software for enterprise resource planning software Apache OFBiz lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to remotely modify protected information...
VulnCheck KEV: CVE-2016-5700
Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 PoC Automation Script This script provides an...
The vulnerability of the Mail.MailConfig component in the XWiki Platform, a platform for creating collaborative web applications, allows a hacker to modify email sending configurations.
The vulnerability of the Mail.MailConfig component in the XWiki platform, a tool for creating collaborative web applications, stems from insecure management of privileges. Exploiting this vulnerability allows an attacker to remotely modify email sending configurations...
The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, due to lack of access control, allows a intruder to modify or view the data on the control panel.
The vulnerability of the GLPI system for requests, incidents, and inventory management is related to lack of access control. Exploiting this vulnerability allows a malicious actor to modify or view data on the control panel remotely...
The vulnerability of the XML conversion software “xml2js” to JavaScript lies in the uncontrolled modification of object prototype attributes. This allows attackers to edit or add new properties to objects.
The vulnerability of the XML object conversion software using JavaScript’s xml2js is related to uncontrolled changes to the attributes of the prototype object. Exploiting this vulnerability allows a malicious actor to remotely modify the properties of the proto object...
CVE-2023-34257
An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...
Authentication flaw
DISPUTED An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is...
CVE-2023-34257: Undefined Security Weakness
An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...
CVE-2023-34257
An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified and, by default, authentication is not required. Some configuration fields related to SNMP e.g., masterAgentName or masterAgentStartLine result in code execution when the agent is restarted...