The vulnerability of the software for managing OpenEdge Authentication Gateway lies in its ability to bypass authentication due to a fundamental error, allowing attackers to elevate their privileges.

The vulnerability of the software for managing OpenEdge Authentication Gateway lies in the ability to bypass authentication due to a fundamental error. Exploiting this vulnerability could allow an attacker, operating remotely, to increase their privileges...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

The Google Android operating system is vulnerable to a critical elevation of privilege (EoP) vulnerability. The issue stems from improper input validation in the access_secure_service_from_temp_bond method within the btm_sec.cc file, which could facilitate keystroke injection . An attacker can ex...

Grandstream GXP14XX and GXP16XX Security Vulnerabilities

The Grandstream GXP14XX and Grandstream GXP16XX are both a series of IP phones from American Trend Networks Grandstream. A security vulnerability exists in the Grandstream GXP14XX version 1.0.8.9 and GXP16XX version 1.0.7.13, which originates from a vulnerability that allows a remote attacker to...

PT-2024-21424

Name of the Vulnerable Software and Affected Versions Cute Http File Server version 3.1 Description The issue allows a remote attacker to escalate privileges via the password verification component. Recommendations For Cute Http File Server version 3.1, consider disabling the password verificatio...

JeeWMS Security Vulnerabilities

JeeWMS is JeeWMS open source a JAVA-based warehouse management system . JeeWMS v.3.7 and earlier versions of a security vulnerability , the vulnerability stems from allowing remote attackers to escalate privileges through the AuthInterceptor component...

The vulnerability of the IBM i operating system, related to the lack of measures taken to protect the SQL query structure, allows attackers to enhance their privileges.

The vulnerability of the IBM i operating system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2024-25844

An issue was discovered in Common-Services "So Flexibilite" soflexibilite module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file...

PT-2024-6162 · Mediatek · Mediatek Wlan Driver

Name of the Vulnerable Software and Affected Versions: MediaTek WLAN driver affected versions not specified Description: The issue is related to insufficient input validation in the WLAN driver, which can lead to a possible out of bounds write. This could allow a remote attacker to escalate their...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts, and product image scaling. A security vulnerability previously existed in PrestaShop So Flexibilite version 4.1.26, which stemmed from a...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36, which stemmed...

PUB-A-314778564

In TBD of TBD, there is a possible Downgrade attack due to a missing null check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-308405635

In TBD of TBD, there is a possible cryptographic downgrade attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Projectworlds Visitor Management System SQL Injection Vulnerability

Projectworlds Visitor Management System is a visitor access management system. It implements self-service functionality for visitors. A SQL injection vulnerability exists in Projectworlds Visitor Management System v.1.0 that could allow a remote attacker to escalate privileges via the name...

CVE-2024-25723: Improper Access Control

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched...

CVE-2024-25723

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched...

Nagios XI Security Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.01, which stems from a vulnerability that allo...

The vulnerability of the deployment and management software for Azure Kubernetes Service Confidential Containers relates to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of the Azure Kubernetes Service Confidential Containers’ deployment and management software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...