PT-2024-31602 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions prior to 4.13.49 Contao versions prior to 5.3.15 Contao versions prior to 5.4.3 Description: Contao is an Open Source CMS. In affected versions, a back end user with access to the file manager can upload malicious files and...

PT-2024-31703 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions prior to 4.13.49 Description: The issue allows authenticated users in the back end to list files outside the document root in the file selector widget. There are no known workarounds for this issue. Recommendations: Update to...

Contao 路径遍历漏洞

Contao is Contao open source a set of open source content management system CMS developed using PHP. The system supports search engines, rights management and CSS frameworks. A path traversal vulnerability exists in versions prior to Contao 4.13.49, which stems from a back-end authenticated user...

RHSA-2017:1259 Red Hat Security Advisory: spacewalk-backend security update

Bulletin has no description...

PT-2024-9770 · Unknown · @Backstage/Plugin-Techdocs-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-techdocs-backend versions prior to 1.10.13 Description: The issue allows an attacker with control of the TechDocs storage buckets to inject executable scripts in the TechDocs content. These scripts will be executed in the...

Logic flaw vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-41275)

UFIDA U8CRM is a professional enterprise-level CRM software. A logic flaw vulnerability exists in UFIDA U8CRM, which can be exploited by an attacker to log in to the backend and obtain sensitive information...

Veeam Data Cloud for Microsoft Azure Release Information and Build Numbers

You are viewing an archived changelog for Veeam Data Cloud for Microsoft Azure. Changelog information has moved to a dedicated webpage, where you can find updates for all Veeam Data Cloud workloads in one place. Click here to visit the new changelog. This KB article lists all versions of Veeam Da...

RHSA-2012:0436 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Bulletin has no description...

RHSA-2012:0102 Red Hat Security Advisory: Red Hat Network Proxy spacewalk-backend security and bug fix update

Bulletin has no description...

RHSA-2012:0101 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security and bug fix update

Bulletin has no description...

RHSA-2019:1663 Red Hat Security Advisory: spacewalk-backend and spacewalk-proxy security update

Bulletin has no description...

RHSA-2013:0848 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Bulletin has no description...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

CVE-2024-45323 affects FortiEDR Manager API versions 6.0 through 6.2.2. The root cause is improper access control (CWE-284) that, in a shared environment, allows an authenticated admin with REST API permissions (restricted to a single organization) to access backend logs containing information re...

Fedora: Security Advisory (FEDORA-2024-9974808629)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...