5837 matches found
HPESBST04758 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Multiple Remote and Local Vulnerabilities
Potential Security Impact: Local: Elevation of Privilege, Escalation of Privilege; Remote: Arbitrary Command Execution, Authentication Bypass, Creation and Deletion of Arbitrary Files, Denial of Service DoS, Gain Privileged Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP...
CVE-2024-56589
creationtimestamp| type| source ---|---|--- 2024-12-27 15:17:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbuo7qyu25 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2025-12-03 14:14:49+00:00| seen|...
HPESBST04766 rev.1 - HPE B-Series SANnav Management Portal, Remote Authentication Bypass Vulnerability
Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - Prior to v2.3.0a CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-52160 |...
Exploit for CVE-2024-57521
Authenticated SQL Injection in RuoYi v4.7.9 Bypass of CVE-202...
CVE-2024-54334
CVE-2024-54334 affects the Quran Phrases About Most People Shortcodes WordPress plugin. Connected data confirm a DOM-Based XSS in Quran Phrases About Most People Shortcodes, affecting version range from n/a up to 1.4. Wordfence vulnerability details note the issue is Mitigated by patches in the 1...
Image Access Scan2Net 安全漏洞
Image Access Scan2Net is a scanning software from the German company Image Access. A security vulnerability in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier stems from a flaw in the self-developed session management, which allows an attacker to take over...
Image Access Scan2Net 安全漏洞
Image Access Scan2Net is a scanning software from Image Access Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which stems from a password change feature that does not require a current or old password, which...
Image Access Scan2Net 安全漏洞
Image Access Scan2Net is a scanning software from Image Access, Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which stems from improper cleaning of the HTTP GET parameter data, which allows an attacker to acce...
frood, an Alpine initramfs NAS
My NAS, frood, has a bit of a weird setup. It’s just one big initramfs containing a whole Alpine Linux system. It’s delightful and I am not sure why it’s not more common. As long as the bootloader can find the kernel and initramfs, the machine comes up cleanly. A/B deployments and rollbacks are...
CVE-2024-11880
The B Testimonial – testimonial plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'btestimonial' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
PT-2024-17317
Name of the Vulnerable Software and Affected Versions The B Testimonial – testimonial plugin for WP plugin for WordPress versions up to, and including, 1.2.2 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'b testimonial' shortcode due to insufficient input...
WordPress plugin B Testimonial 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-11880: Improper Neutralization of Input During Web Page Generation
The B Testimonial – testimonial plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'btestimonial' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
The vulnerability of the application software interface of the Cisco Unified Computing System’s servers—Cisco UCS B-Series, Managed C-Series, and X-Series—is related to the failure to implement measures to neutralize specific elements. This allows attackers to execute arbitrary code and elevate their privileges to the root level.
The vulnerability of the application software interface of the Cisco Unified Computing System’s servers—Cisco UCS B-Series, Managed C-Series, and X-Series—is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2024-10490
An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...
CVE-2024-10490 Authentication bypass flaw in several mapp components
An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...
CVE-2024-10490 Authentication bypass flaw in several mapp components
An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...
CVE-2024-10490
The CVE-2024-10490 issue affects B&R mapp Cockpit, View, Services, Motion, and Vision prior to version 6.0, due to an Authentication Bypass in the OPC UA Server configuration. The root cause is an authentication bypass that can be triggered by an unauthenticated network-based attacker, potentiall...
CVE-2024-10490: Authentication Bypass Using an Alternate Path or Channel
An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an...
The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the btrfs component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...