7272 matches found
Horner Automation Cscape
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...
[SECURITY] Fedora 40 Update: zabbix-6.0.36-1.fc40
Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...
CVE-2024-55564
creationtimestamp| type| source ---|---|--- 2024-12-09 01:25:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113620257276226459 2024-12-09 01:28:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113620269710436762 2024-12-09 03:49:22+00:00| seen| https://t.me/cvedetector/123...
IBM Cognos Controller File Upload Vulnerability (CNVD-2025-01789)
IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A file upload vulnerability exists in IBM Cognos...
CVE-2024-54679
creationtimestamp| type| source ---|---|--- 2024-12-05 14:12:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113600625283050849 2024-12-05 16:11:43+00:00| seen| https://t.me/cvedetector/12098 2024-12-06 06:10:41+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9323...
Planet Technology Planet WGS-804HPT
RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all control system...
AutomationDirect C-More EA9 Programming Software
RISK EVALUATION Successful exploitation of these vulnerabilities could result in memory corruption; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities...
CVE-2024-12148
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints...
CVE-2024-12148
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints...
CVE-2024-12148
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints...
CVE-2024-12148
CVE-2024-12148 affects Devolutions Server 2024.3.6.0 and earlier. The root cause is incorrect authorization in the permission validation component, allowing an authenticated user to access some reporting endpoints. Impact is limited to unauthorized access to reporting data as described in multipl...
CVE-2024-12148
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints...
CISA Releases New Public Version of CDM Data Model Document
Today, the Cybersecurity and Infrastructure Security Agency CISA released an updated public version of the Continuous Diagnostics and Mitigation CDM Data Model Document. Version 5.0.1 aligns with fiscal year 2023 Federal Information Security Modernization Act FISMA metrics. The CDM Data Model...
Moderate: Red Hat Security Advisory: ACS 4.6 enhancement and security update
Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes new features and bug fixes. This release of RHACS 4.6 provides these new features: Support for ARM architecture in secured clusters Technology Preview Certifications for Red Hat Advanced Clust...
PT-2024-17456 · Devolutions · Devolutions Server
Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.6.0 and earlier Description: The issue is related to incorrect authorization in the permission validation component, allowing an authenticated user to access some reporting endpoints. This problem can lead t...
Devolutions Server 安全漏洞
Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.6.0 and prior versions, which stems from incorrect authorization of the Privilege...
CVE-2024-20139
creationtimestamp| type| source ---|---|--- 2024-12-02 04:13:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113581282974666461 2024-12-02 06:12:23+00:00| seen| https://t.me/cvedetector/11737...
CVE-2024-11979
creationtimestamp| type| source ---|---|--- 2024-11-29 02:16:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113563833013964238...
The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus lies in the lack of security measures for SQL query structures. This allows attackers to execute custom queries and gain access to database table records.
The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute user-defined queries and gain access to...