Dell Wyse Management Suite 跨站脚本漏洞

The Wyse Management Suite is a cloud and local management platform from Dell, USA. A cross-site scripting vulnerability exists in Wyse Management Suite that stems from improper input neutralization and can be exploited by an attacker to cause script injection...

Cisco TelePresence Management Suite XSS (cisco-sa-tms-xss-vuln-WbTcYwxG)

According to its self-reported version, Cisco TelePresence Management Suite is affected by a cross-site scripting vulnerability. - A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow a low-privileged, remote attacker to conduct a cross-site...

Dell Wyse Management Suite 代码问题漏洞

The Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints, providing centralized management, asset tracking and automated device discovery. A code issue vulnerability exists in Wyse Management Suite. The vulnerability stems from the program failing to adequately...

PT-2025-14445 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow a high-privileged attacker with remote...

PT-2025-14444 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to WMS 5.1 Description: The issue concerns an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability,...

PT-2025-14448 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue is related to Insecure Inherited Permissions, which could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized access...

Dell Wyse Management Suite WMS 安全漏洞

Wyse Management Suite WMS is a cloud and local management platform from Dell, USA. Wyse Management Suite WMS suffers from an authorization issue vulnerability that stems from insecure inheritance permissions, no details of the vulnerability are provided at this time...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is a software solution from Dell for managing and monitoring client devices and virtual desktop infrastructures. An information disclosure vulnerability exists in Wyse Management Suite. The vulnerability results in the disclosure of sensitive information due to a data query...

PT-2025-14446 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to WMS 5.1 Description: The issue concerns an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial o...

PT-2025-14447 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 5.1 Description: The issue allows an unauthenticated attacker with remote access to potentially exploit the vulnerability, leading to information disclosure. This is due to an Exposure of Sensitive...

WordPress plugin Astra Security Suite plugin<= 0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das in WordPress Plugin Astra Security Suite versions = 0.2...

CVE-2025-31774

Missing Authorization vulnerability in WebProtect.ai Astra Security Suite getastra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Astra Security Suite: from n/a through = 0.2...

CVE-2025-31774 WordPress plugin Astra Security Suite plugin<= 0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebProtect.ai Astra Security Suite getastra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Astra Security Suite: from n/a through = 0.2...

CVE-2025-31774 WordPress Astra Security Suite plugin<= 0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebProtect.ai Astra Security Suite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Astra Security Suite: from n/a through 0.2...

CVE-2025-31774

CVE-2025-31774 concerns a Missing Authorization vulnerability in Astra Security Suite (Firewall & Malware Scan). Affected: Astra Security Suite up to v0.2. Impact: bypass of access control/security levels due to misconfiguration. CVSS v3.1 base score 5.3 (Network, Low attack complexity, Privilege...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to next-12.3.4.tgz CVE-2024-51479

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to next-12.3.4.tgz CVE-2024-51479. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-51479 DESCRIPTION: Next.js is a React framework for building full-stack web...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.7.1.jar CVE-2024-31141

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.7.1.jar CVE-2024-31141. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties,...

CVE-2025-2008

The Import Export Suite for CSV and XML Datafeed plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the importsinglepostascsv function in all versions up to, and including, 7.19. This makes it possible for authenticated attackers, with...

CVE-2025-2007

CVE-2025-2007 affects the Import Export Suite for CSV and XML Datafeed WordPress plugin (all versions up to 7.19). The vulnerability arises from insufficient file path validation in the deleteImage() function, enabling authenticated users with Subscriber+ access to delete arbitrary files on the s...

CVE-2025-2008

CVE-2025-2008 affects the Import Export Suite for CSV and XML Datafeed WordPress plugin. The vulnerability allows authenticated users with Subscriber+ privileges to upload arbitrary files due to missing file-type validation in import_single_post_as_csv(), across all versions up to 7.19. This can ...