Lucene search
+L

2972 matches found

CNNVD
CNNVD
added 2024/12/19 12:0 a.m.5 views

OpenText Privileged Access Manager 安全漏洞

OpenText Privileged Access Manager is a privileged access management software from OpenText Canada. A security vulnerability exists in OpenText Privileged Access Manager versions 23.3 4.4 and 24.3 4.5. An attacker could bypass authentication by exploiting the vulnerability...

8CVSS6.8AI score0.00367EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.7 views

PT-2024-17446 · Opentext · Opentext Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: OpenText Privileged Access Manager versions 23.34.4 through 24.34.5 Description: In a specific scenario, a LDAP user can abuse the authentication process in OpenText Privileged Access Manager, allowing authentication bypass. Recommendations:...

8CVSS7.2AI score0.00367EPSS
SaveExploits0References6
NVD
NVD
added 2024/11/01 3:15 p.m.18 views

CVE-2024-37209

Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2...

6.5CVSS0.00476EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:22 p.m.59 views

CVE-2024-37209

CVE-2024-37209 affects the WordPress plugin User Rights Access Manager (

6.5CVSS6.5AI score0.00476EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:22 p.m.46 views

CVE-2024-37209 WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability

Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2...

6.5CVSS0.00476EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:22 p.m.11 views

CVE-2024-37209 WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability

Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2...

6.5CVSS6.9AI score0.00476EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/28 12:0 a.m.12 views

The vulnerability of the Core module of the Indeed Privileged Access Manager allows a perpetrator to trigger a service failure.

The vulnerability of the Core module of the Indeed Privileged Access Manager software lies in its uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS5.5AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.5 views

PT-2024-7265 · Indeed · Indeed Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: Indeed Privileged Access Manager affected versions not specified Description: The issue is related to an uncontrolled resource consumption vulnerability in the Core module of Indeed Privileged Access Manager. This could allow a remote attacke...

6.1CVSS7.1AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/18 2:11 a.m.37 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On July 2020 CPU plus deferred CVE-2020-2590 and CVE-2020-2601

Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in another security bulletin. Vulnerability Details Refer to the security...

6.8CVSS7AI score0.04196EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/16 7:15 a.m.3 views

CVE-2019-25213

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

7.5CVSS5.8AI score0.02772EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/10/16 6:43 a.m.13 views

CVE-2019-25213 Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive file...

9.8CVSS7AI score0.02772EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.5 views

WordPress plugin Advanced Access Manager 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

9.8CVSS6.9AI score0.02772EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.10 views

PT-2024-10744 · Wordfence +1 · Wordfence +1

Name of the Vulnerable Software and Affected Versions: Advanced Access Manager plugin for WordPress versions up to, and including, 5.9.8.1 Wordfence affected versions not specified Description: The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read d...

9.8CVSS6.8AI score0.02772EPSS
SaveExploits1References28
VulnCheck KEV
VulnCheck KEV
added 2024/10/15 12:0 a.m.6 views

VulnCheck KEV: CVE-2019-25213

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive...

9.8CVSS5.8AI score0.02772EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.9 views

The vulnerability of the software solutions for control, management, and audit, namely Zoho ManageEngine Password Manager Pro, and the ManageEngine Privileged Access Manager 360 (PAM360) software, allows a perpetrator to execute arbitrary code.

The vulnerability of the Zoho ManageEngine Password Manager Pro and the ManageEngine Privileged Access Manager 360 PAM360 software solutions lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability could allow a...

9CVSS6.2AI score0.0304EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.10 views

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to memory-walking attacks. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

8.1CVSS5.5AI score0.01486EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.216 views

Cisco Network Access Manager Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Network Access Manager Directory Traversal Vulnerability', 'Description' = %q This module tests whether a directory traversal vulnerability...

7.8CVSS7AI score0.21593EPSS
SaveExploits2
OSV
OSV
added 2024/08/28 7:15 a.m.7 views

CVE-2024-4556

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1...

7.5CVSS5.8AI score0.00405EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/28 7:15 a.m.42 views

CVE-2024-4556

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1...

7.5CVSS0.00405EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/28 7:15 a.m.4 views

CVE-2024-4555

Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...

7.5CVSS5.8AI score0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder