18990 matches found
PT-2024-19455 · Allegra · Allegra
Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can ...
PT-2024-19674 · Centreon · Centreon
Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this issue. The specific flaw exists within the...
PT-2024-12856 · Westermo · Westermo Lynx
Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: An attacker with access to the Westermo Lynx web application could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the forward.0.domain parameter...
PT-2024-19160 · Veeam · Veeam Recovery Orchestrator
Name of the Vulnerable Software and Affected Versions: Veeam Recovery Orchestrator affected versions not specified Description: The issue allows a user with a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service. Recommendations: At the...
PT-2024-1747 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager is susceptible to a Remote Code Execution issue. This issue allows an authenticated user to abuse a SolarWinds service, resulti...
PT-2024-13230 · Westermo · Westermo Lynx
Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: A potential attacker with access to the Westermo Lynx device could execute malicious code, affecting the device's correct functioning. Recommendations: At the moment, there is no...
PT-2024-11033 · Yarn +2 · Yarn +2
Name of the Vulnerable Software and Affected Versions: Yarn affected versions not specified Description: An untrusted search path issue was found, allowing malicious commands to be executed in unexpected ways when certain commands are run in a directory with attacker-controlled content...
CVE-2023-50359
An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vector...
CVE-2023-50359 QTS, QuTS hero
An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vector...
PT-2024-13902 · Ibm · Ibm Powersc
Name of the Vulnerable Software and Affected Versions: IBM PowerSC affected versions not specified Description: The issue concerns cross-origin resource sharing in IBM PowerSC. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2024-12632 · Hcl · Hcl Bigfix Platform
Name of the Vulnerable Software and Affected Versions: HCL BigFix Platform affected versions not specified Description: A cross-site scripting XSS vulnerability in the Web Reports component can possibly allow an attack to exploit an application parameter during execution of the Save Report...
PT-2024-19933 · Hcl +1 · Hcl Launch +2
Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch UCD affected versions not specified Description: The issue could disclose sensitive user information when installing the Windows agent. Recommendations: At the moment, there is no information about a newer versi...
PT-2024-13960 · Lexmark · Lexmark Devices
Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A buffer overflow vulnerability has been identified in the PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary...
PT-2024-1469 · Aveva · Aveva Edge
Name of the Vulnerable Software and Affected Versions: AVEVA Edge affected versions not specified Description: The issue is related to the loading of unsafe DLL libraries, which could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege...
PT-2024-37896 · Grafana · Grafana
Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: A medium severity security fix has been released for Grafana. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2024-13314 · Nano · Nano
Name of the Vulnerable Software and Affected Versions: nano affected versions not specified Description: The issue is related to a null pointer dereference in nano, specifically via the read the list function. Recommendations: At the moment, there is no information about a newer version that...
PT-2024-19982 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: An authentication bypass issue exists in the web component, allowing an attacker to access protected URLs and retrieve sensitive information. Recommendations: At the moment, there i...
PT-2024-12896 · Westermo · Westermo Lynx 206-F2G
Name of the Vulnerable Software and Affected Versions: Westermo Lynx 206-F2G affected versions not specified Description: An attacker with access to the network where the affected devices are located could maliciously take actions to obtain, via a sniffer, sensitive information exchanged via TCP...
PT-2024-15243 · Lantronix · Lantronix Xport
Name of the Vulnerable Software and Affected Versions: Lantronix XPort affected versions not specified Description: The issue concerns the transmission of weakly encoded credentials within web request headers. Recommendations: At the moment, there is no information about a newer version that...