3798 matches found
PT-2024-18674 · Cisco · Cisco Ise
Name of the Vulnerable Software and Affected Versions: Cisco ISE affected versions not specified Description: A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. This issue is due to insufficient validatio...
CVE-2024-20527: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need valid Super Admin credentials. This vulnerability is due to insufficient validation of user-suppli...
CVE-2024-10919: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack can be launched remotely. The exploit h...
CVE-2024-9946: Improper Authentication
The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.13.68. This is due to insufficient verification on the user being returned by the social login token. This makes it...
CVE-2024-20532: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need valid Super Admin credentials. This vulnerability is due to insufficient validation of user-suppli...
PT-2024-36837
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was found in the Linux kernel's isofs component, specifically in the iocharset parameter. The leak occurs when the opt-iocharset is not freed in certain situations, such as...
PT-2024-18675 · Cisco · Cisco Ise
Name of the Vulnerable Software and Affected Versions: Cisco ISE affected versions not specified Description: A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locations on the underlying operating system of an affected device. This...
WordPress plugin Super Socializer 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...
PT-2024-16640
Name of the Vulnerable Software and Affected Versions didi Super-Jacoco version 1.0 Description A critical issue has been found in the software, affecting an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the uuid argument leads to os command injection. This issue ca...
CVE-2024-20529: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. To exploit this vulnerability, the attacker would need valid Super Admin credentials. This vulnerability is due to insufficient validation of user-suppli...
CVE-2024-20531: Improper Restriction of XML External Entity Reference
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device and conduct a server-side request forgery SSRF attack through an affected device. To exploit this vulnerability, the attacker woul...
PT-2024-8314 · Cisco · Cisco Ise
Name of the Vulnerable Software and Affected Versions: Cisco ISE affected versions not specified Description: A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files on an affected device. The attacker would need valid Super Admin...
CVE-2024-20528: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locations on the underlying operating system of an affected device. To exploit this vulnerability, an attacker would need valid Super Admin credentials. This vulnerability is due to...
WordPress Super Socializer plugin <= 7.13.68 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin Super Socializer versions = 7.13.68...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-51528
The CVE-2024-51528 issue concerns improper log printing in Huawei’s Super Home Screen module (HarmonyOS/EMUI). Affected component: Super Home Screen module; root cause: improper log handling leading to confidentiality exposure. Exploitation vector: local access, low complexity, no user interactio...
Huawei HarmonyOS和Huawei EMUI 安全漏洞
Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS and...