1994 matches found
CVE-2024-3383
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine CIE agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your...
CVE-2024-3383
CVE-2024-3383 affects Palo Alto Networks PAN-OS where data from Cloud Identity Engine (CIE) agents can modify User-ID groups. Affected are PAN-OS versions reported by the Nessus plugin: 10.1.x before 10.1.11, 10.2.x before 10.2.5, and 11.0.x before 11.0.3. Impact: user access may be incorrectly g...
PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine CIE agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your...
PT-2024-2902 · Palo Alto Networks · Pan-Os
Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine CIE agents enables modification of User-ID groups. This impacts user access to...
Palo Alto Networks PAN-OS 10.1.x < 10.1.11 / 10.2.x < 10.2.5 / 11.0.x < 11.0.3 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.11 or 10.2.x prior to 10.2.5 or 11.0.x prior to 11.0.3. It is, therefore, affected by a vulnerability. - A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identit...
Campcodes Online Event Management System SQL注入漏洞
Campcodes Online Event Management System is an online event management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Online Event Management System version 1.0, which originates from an unknown part of /api/process.php and results in SQL injection via the parameter...
nodejs: setuid() does not drop all privileges due to io_uring
A flaw was found in Node.js, where the setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This issue allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid...
Task Management System SQL注入漏洞
SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in PHP Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can lead to sql injection...
Storefront user can access history and most viewed data from matching back-office user with the same ID
Impact Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user...
UBUNTU-CVE-2024-22017
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
Online-College-Event-Hall-Reservation-System SQL Injection Vulnerability
Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. Online-College-Event-Hall-Reservation-System suffers from a SQL...
CVE-2019-14782
creationtimestamp| type| source ---|---|--- 2024-03-12 15:11:37+00:00| seen| https://t.me/ctinow/205739...
BIT-SUITECRM-2021-25961 SuiteCRM - Account Takeover in Password Reset Functionality
In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id...
BIT-POSTGRESQL-2023-2455
Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security...
GLiNet - Router Authentication Bypass
DZONERZY Security Research GLiNet: Router Authentication Bypass ======================================================================== Contents ======================================================================== 1. Overview 2. Detailed Description 3. Exploit 4. Timeline...
CVE-2024-27692
creationtimestamp| type| source ---|---|--- 2024-03-01 18:31:38+00:00| seen| https://t.me/ctinow/197879...
GHSA-Q76R-7P4Q-MQPW
creationtimestamp| type| source ---|---|--- 2024-03-01 00:37:00+00:00| seen| https://t.me/ctinow/197169...
GHSA-45M2-8Q7F-93WV
creationtimestamp| type| source ---|---|--- 2024-02-29 21:26:56+00:00| seen| https://t.me/ctinow/197020...