6578 matches found
CVE-2025-7051 N-central Syslog Configuration Insecure Direct Object Reference
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...
N‑able N-Central 安全漏洞
N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability exists in N-able N-Central versions prior to 2025.2 that originates from an authenticated user being able to read and write modify syslog configuration...
PT-2025-34268 · Solarwinds · N-Central
Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2025.2 Description: An authenticated user can read, write, and modify syslog configurations across customers on an N-central server. Recommendations: Update to version 2025.2 or later...
CVE-2025-7051: Improper Access Control
On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...
CVE-2024-12223
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...
CVE-2024-12223
CVE-2024-12223 corresponds to a stored cross-site scripting (XSS) vulnerability in Nutanix Prism Central. The issue affects Prism Central versions prior to 2024.3.1 and stems from the Events component, allowing an attacker to hijack a victim user’s session and execute actions in their security co...
CVE-2024-12223 Stored Cross-site Scripting (XSS) in Nutanix Prism Central
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...
CVE-2024-12223 Stored Cross-site Scripting (XSS) in Nutanix Prism Central
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...
CVE-2024-12223: Improper Neutralization of Input During Web Page Generation
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and perform actions in their security context...
Nutanix Prism Central 跨站脚本漏洞
Nutanix Prism Central is a centralized management console from Nutanix USA. A security vulnerability exists in Nutanix Prism Central versions prior to 2024.3.1 that stems from a stored cross-site scripting vulnerability in the Events component that could lead to session hijacking...
PT-2025-33891 · Nutanix · Prism Central
Name of the Vulnerable Software and Affected Versions: Prism Central versions prior to 2024.3.1 Description: Prism Central is susceptible to a stored cross-site scripting attack through the Events component. This allows an attacker to hijack a victim user’s session and perform actions within that...
CVE-2021-44515
Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2,...
Exploit for Deserialization of Untrusted Data in N-Able N-Central
CVE-2025-8875 & CVE-2025-8876 How does this detection met...
CVE-2025-8876
Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1...
N-able N-central < 2024.6 HF2 / 2025.x < 2025.3.1 Multiple Vulnerabilities
The version of N-able N-central installed on the remote host is prior to 2024.6 HF2 or 2025.x prior to 2025.3.1. It is, therefore, affected by multiple vulnerabilities: - Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code. CVE-2025-8875 - Improper...
Linux Distros Unpatched Vulnerability : CVE-2023-4408
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but...
MAL-2025-14254 Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)
The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm)
The package alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv was found to contain malicious code...