331 matches found
CVE-2019-19119
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials...
CVE-2022-36978
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Notification...
CVE-2022-36974
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Web File...
PT-2024-33487 · Misskey · Misskey
Name of the Vulnerable Software and Affected Versions: Misskey versions 2024.10.1 or earlier Description: Misskey is an open source, federated social media platform. In affected versions, the FileServerService media proxy did not detect proxy loops, allowing remote actors to execute a...
CVE-2024-50373
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...
CVE-2024-49382
Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...
CVE-2024-49382
Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...
CVE-2024-49382
The CVE-2024-49382 issue affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690. The archive-server service binds to an unrestricted IP address, creating an excessive attack surface due to exposure. A confirmed remediation is to update to build 38690 or later; PT Security also ...
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account...
CVE-2024-38236 DHCP Server Service Denial of Service Vulnerability
...
PT-2024-6257 · Microsoft · Windows +2
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified DHCP Server Service affected versions not specified Remote Desktop Licensing Service affected versions not specified Description: The issue is related to a denial-of-service vulnerability that can be...
CVE-2024-38236: Uncontrolled Resource Consumption
DHCP Server Service Denial of Service Vulnerability...
Insertion Of Sensitive Information Into Log File
Steeltoe.Discovery is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to improperly masked Eureka server service URLs, which may leak credentials into logs when fetching the service registry. Attackers can use this to gain unauthorized access to sensitive...
CVE-2024-40636 Basic Auth Credential Leakage to Logs After Fetch Registry Error in Steeltoe.Discovery.Eureka with Peer Awareness
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
GHSA-VMCP-66R5-3PCP Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error
Summary When utilizing multiple Eureka server service URLs with basic auth and encountering an issue with fetching the service registry, an error is logged with the Eureka server service URLs but only the first URL is masked. Details Package: Steeltoe.Discovery.Eureka Package version: 3.2.1 Branc...
CVE-2024-40636: Insertion of Sensitive Information into Log File
Steeltoe is an open source project that provides a collection of libraries that helps users build production-grade cloud-native applications using externalized configuration, service discovery, distributed tracing, application management, and more. When utilizing multiple Eureka server service UR...
CVE-2024-38044: Numeric Truncation Error
DHCP Server Service Remote Code Execution Vulnerability...
PT-2024-4859
Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The issue is related to numerical truncation errors in the Windows DHCP Server Service. It allows remote attackers to execute arbitrary code on the system...
PT-2024-4277
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an integer overflow in the DHCP Server Service of Windows operating systems. It allows a remote attacker to cause a denial of service. Recommendations At the moment,...