PT-2024-17148 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.4 Description: The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution through argument injection. Recommendations: For versions prior to 22.7R2.4,...

CVE-2023-0163 Prototype Pollution in convict

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...

WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting

Overview WordPress Plugin "WP Admin UI Customize" provided by gqevu6bsiz contains a stored cross-site scripting vulnerability CWE-79. Ibuki Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a malicious...

CVE-2024-10146 Simple File List < 6.1.13 - Reflected Cross-Site Scripting

The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape a generated URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against admins...

CVE-2024-39710

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...

CVE-2024-50324

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-43435

CVE-2024-43435 describes a Moodle vulnerability where, due to insufficient capability checks, users who can restore glossaries in courses can inadvertently restore them into the global site glossary. The issue centers on authorization logic for glossary restoration, enabling an unintended elevati...

CVE-2024-43435 Moodle: can create global glossary without being admin

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

CVE-2024-43435 Moodle: can create global glossary without being admin

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

CVE-2024-20539

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input...

Chamilo LMS 安全漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.26, which stems...

BIT-GRAFANA-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...

SUSE CVE-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...

GHSA-66C4-2G2V-54QW Grafana org admin can delete pending invites in different org

Organization admins can delete pending invites created in an organization they are not part of...

CVE-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...

UBUNTU-CVE-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...

CVE-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...

CVE-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...

CVE-2024-10452

Organization admins can delete pending invites created in an organization they are not part of...