498 matches found
CVE-2024-7477
CVE-2024-7477 documents a SQL injection vulnerability in Avaya Aura System Manager. An CLI user with administrative privileges can trigger arbitrary SQL queries against the System Manager database. Affected versions: 10.1.x.x and 10.2.x.x; versions prior to 10.1 are end of manufacturer support. R...
CVE-2024-7477 Avaya Aura System Manager SQL injection vulnerability
A SQL injection vulnerability was found which could allow a command line interface CLI user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer...
CVE-2024-7477 Avaya Aura System Manager SQL injection vulnerability
A SQL injection vulnerability was found which could allow a command line interface CLI user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer...
CVE-2024-7477: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability was found which could allow a command line interface CLI user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer...
Avaya Aura System Manager 安全漏洞
Avaya Aura System Manager is an administrative tool from Avaya USA Inc. A security vulnerability exists in Avaya Aura System Manager that originates from a Command Line Interface CLI user with administrative privileges being able to read arbitrary files on the system...
CVE-2024-7480: Incorrect Privilege Assignment
An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interface CLI user with administrative privileges to read arbitrary files on the system. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer...
Avaya Aura System Manager 安全漏洞
Avaya Aura System Manager is an administrative tool from Avaya Corporation USA. A security vulnerability exists in Avaya Aura System Manager that originates from a command line interface CLI user with administrative privileges being able to execute arbitrary queries against the Avaya Aura System...
PT-2024-38374
Name of the Vulnerable Software and Affected Versions Avaya Aura System Manager versions 10.1.x.x through 10.2.x.x Description An improper access control issue was found in Avaya Aura System Manager, allowing a command-line interface user with administrative privileges to read arbitrary files on...
PT-2024-38373 · Avaya · Avaya Aura System Manager
Name of the Vulnerable Software and Affected Versions: Avaya Aura System Manager versions 10.1.x.x through 10.2.x.x Avaya Aura System Manager versions prior to 10.1 Description: A SQL injection issue was discovered, allowing a command line interface user with administrative privileges to execute...
Moderate: systemd security update
The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...
Design/Logic Flaw
Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager...
RLSA-2023:3837 Moderate: systemd security and bug fix update
The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...
Ivanti Sentry System Manager Portal Detection
Binary data ivantisentrywebportaldetect.nbin...
KB API Authentication Bypass on Sentry Administrator Interface - CVE-2023-38035
Last Modified Date Sep 5, 2023 9:01:44 AM...
Danfoss AK-SM800A 安全漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A security vulnerability exists in Danfoss AK-SM800A 3.3 and earlier versions that originates from improper input validation and can be exploited by an attacker to execute arbitrary commands...
CVE-2023-30563
A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session...
CVE-2023-30563
A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session...
Session fixation
A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session...
CVE-2023-30563
BD Alaris Systems Manager (SM) versions 12.3 and prior are affected by CVE-2023-30563, an improper input validation vulnerability that allows a malicious file uploaded via the System Manager User Import Function to trigger a Cross-Site Scripting (XSS) condition and hijack a user session. The CVSS...