The vulnerability in the web interface of the Veeam Backup Enterprise Manager component allows a perpetrator to escalate their privileges.

The vulnerability in the web interface of the Veeam Backup Enterprise Manager component is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

OESA-2024-1660 cockpit security update

Cockpit makes GNU/Linux discoverable. See Linux server in a web browser and perform system tasks with a mouse. It’s easy to start containers, administer storage, configure networks, and inspect logs with this package. Security Fixes: An SSRF issue was discovered in cockpit-project.org Cockpit 234...

PT-2024-5284 · Splunk · Splunk Config Explorer

Name of the Vulnerable Software and Affected Versions: Splunk Config Explorer versions prior to 1.7.16 Description: The issue exists due to inadequate protection of the web page structure in Splunk Config Explorer, allowing for a cross-site scripting XSS attack. If exploited, this could lead to t...

PT-2024-4166

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro affected versions not specified Description The issue is related to the lack of protection for the web page structure in the HP LaserJet Pro printer firmware. This can be exploited by a remote attacker to conduct a Cross-Site...

pcs security update

0.10.18-2.0.1 - Replace HAM-logo.png with a generic one 0.10.18-2 - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack Resolves: RHEL-26445, RHEL-26447, RHEL-26449 0.10.18-1 - Rebased to the latest sources see CHANGELOG.md Resolves: RHEL-7741 0.10.17-6 - Rebased to th...

PT-2024-4810 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.4 through 12.0 Description: The issue exists due to insufficient protection of the web page structure, allowing a remote attacker to exploit it and potentially disclose credentials within a trusted session...

CVE-2024-29849

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface...

CVE-2024-29849

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface...

CVE-2024-29849

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface...

CVE-2024-20360

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately...

PT-2024-11945 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker ...

Veeam Backup Enterprise Manager 安全漏洞

Veeam Backup Enterprise Manager is a centralized management and monitoring tool from Veeam USA. A security vulnerability exists in Veeam Backup Enterprise Manager that originates from allowing unauthenticated users to log in to the Enterprise Manager web interface as any user...

Cisco Firepower Management Center 安全漏洞

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a SQL injection vulnerability that stems from the web-based management interface not adequately validating user input. A remote attacker coul...

PT-2024-3779 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to the web-based management interface of Cisco Firepower Management Center FMC Software, which does not adequately validate user...

CVE-2024-34241

A cross-site scripting XSS vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications...

The vulnerability in the web interface of the operating system administrator FortiOS allows a perpetrator to execute arbitrary commands.

The vulnerability in the Windows operating system’s administrator web interface, FortiOS.sv, relates to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP or HTTPS requests...

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 allows a perpetrator to disclose protected information.

The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 is related to the ability to bypass authentication due to a software bug. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability in the web interface for controlling microprogrammed software-based Cisco IP Phones such as Cisco IP Phone 6800, Cisco IP Phone 7800, Cisco IP Phone 8800, and Cisco Video Phone 8875 allows a perpetrator to initiate telephone calls from the vulnerable device.

The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to initiate telephone calls from a vulnerable device using...

CVE-2024-4999

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller:...

Ligowave 安全漏洞

Ligowave is a line of wireless devices from Ligowave, Inc. A security vulnerability exists in Ligowave UNITY 6.95-2 and earlier, Ligowave PRO 6.95-1.Rt3883 and earlier, Ligowave MIMO 6.95-1.Rt2880 and earlier, and Ligowave APC Propeller 2-5.95-4.Rt3352 and earlier versions that A vulnerability...