CVE-2024-24116

An issue in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release9736 allows a remote attacker to gain privileges via the system/configmenu.htm...

The vulnerability of the microprogramming software of the Infinera hiT 7300 platform, which is related to the use of rigidly encrypted account data, allows attackers to enhance their privileges.

The vulnerability of the microprogramming software used in the Infinera hiT 7300 optical communication platform is related to the use of rigidly encrypted account data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges by gaining access t...

CVE-2024-8448

PLANET Technology switch models are affected by CVE-2024-8448 due to a hard-coded credential in the CLI, enabling remote attackers with regular privileges to login and obtain a Linux root shell. The vulnerability affects certain PLANET switches (specific models not publicly detailed in the source...

CVE-2024-8448 PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell...

CVE-2024-8448 PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell...

The vulnerability of VMware vCenter Server’s software management system, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of VMware vCenter Server’s software management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted malware packages remotely...

The vulnerability of the Microsoft SQL Server database management system, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Doccano 安全漏洞

doccano is an open source human text annotation tool from doccano open source. A security vulnerability exists in Doccano v1.8.4 and earlier versions. A remote attacker exploited the vulnerability to elevate privileges via the modelattribs parameter...

PT-2024-9226 · 2N · 2N Access Commander

Name of the Vulnerable Software and Affected Versions: 2N Access Commander versions 3.1.1.2 and prior Description: The issue is related to an Insufficient Verification of Data Authenticity, which could allow an attacker to escalate their privileges and gain root access to the system. This...

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from insufficient validation of input data, allowing attackers to exploit their privileges.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the OpenVPN Connect software lies in the insufficient restriction of connection channels for specified endpoints. This allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the OpenVPN Connect software is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores relates to deficiencies in access control, allowing attackers to enhance their privileges.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

PT-2024-6357 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server versions prior to 13.0.7045.2 Microsoft SQL Server versions prior to 13.0.6450.1 Microsoft SQL Server versions prior to 15.0.4395.2 Microsoft SQL Server versions prior to 15.0.2125.1 Microsoft SQL Server versions prior to...

PT-2024-10103

Name of the Vulnerable Software and Affected Versions rsync affected versions not specified Description The issue is related to an uncontrolled resource consumption in the rsync repository validator FORT. It can be exploited by a remote attacker to elevate their privileges. A malicious RPKI rsync...

The vulnerability of the automated deployment and scaling service for managed Apache Cassandra Azure Managed Instances lies in the lack of access control mechanisms, allowing attackers to escalate their privileges.

The vulnerability of the automated deployment and scaling service for managed Apache Cassandra instances in Azure is related to lack of access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Azure Health Bot, a tool for creating and deploying intelligent chatbots in the healthcare sector, lies in the insufficient verification of incoming requests. This allows attackers to increase their privileges.

The vulnerability of the tool for creating and deploying intelligent chatbots in the healthcare domain, Azure Health Bot, is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the CyberArk Identity Management access control system, related to the implementation of security functions at the client side, allows attackers to increase their privileges.

The vulnerability of the CyberArk Identity Management access control system lies in the implementation of security functions at the client side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the print queue dispatcher in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the print scheduler in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2024-7251 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to the presence of pre-installed credentials in the software. Exploitation of this issue may allow a remote attacker to elevate their privileges within the system and...