VulnCheck KEV: CVE-2024-43572

Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution...

CVE-2024-9380

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

VulnCheck KEV: CVE-2024-9379

Ivanti Cloud Services Appliance CSA contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements...

Fedora 40 : webkitgtk (2024-4c6304b6fa)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4c6304b6fa advisory. Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent fi...

PT-2024-7355 · Ivanti · Ivanti Csa

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.2 Description: The issue allows a remote authenticated attacker with admin privileges to bypass restrictions via path traversal. This can potentially lead to further exploitation. There is no information...

CVE-2024-43572

Microsoft Management Console Remote Code Execution Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Microsoft Management Console 安全漏洞

Microsoft Management Console is a general-purpose management console framework from Microsoft Corporation USA that hosts and manages a variety of system management tools called console plug-ins or management units. A security vulnerability exists in Microsoft Management Console. An attacker...

The vulnerability of the Ivanti Workspace Control management console, related to bypassing authentication through spoofing, allows a perpetrator to elevate their privileges.

The vulnerability of Ivanti Workspace Control’s software for controlling user access to applications and data involves bypassing authentication through phising techniques. Exploiting this vulnerability can allow attackers to enhance their privileges...

UBUNTU-CVE-2024-43365

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Multiple sources describe an XSS issue that could lead to an account takeover (Exploits: stored XSS, including a demonstrated account takeover vector). The Red Hat and CVE records confirm the vulnerability; PT-2024...

Teedy 安全漏洞

Teedy is an open source, lightweight document management system for individuals and businesses from Teedy Open Source in France. A security vulnerability exists in Teedy version 1.11, which stems from vulnerability to cross-site scripting XSS attacks via the administration console...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

HPESBGN04708 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Unauthorized Access to Files, Server-Side Request Forgery SSRF; Remote: Arbitrary Code Execution, Unauthorized Access to Files, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

PT-2024-19850 · Qualcomm · Snapdragon +25

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file. This...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

Diebold Nixdorf Vynamic View Console 代码问题漏洞

Diebold Nixdorf Vynamic View Console is a Diebold Nixdorf system that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A code issue vulnerability exists in Diebold Nixdorf Vynamic View Console versions prior to 5.9.5 that stems from an...

Diebold Nixdorf Vynamic View Console 信息泄露漏洞

Diebold Nixdorf Vynamic View Console is a Diebold Nixdorf system that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. An information disclosure vulnerability exists in Diebold Nixdorf Vynamic View Console versions prior to 5.9.5, which ste...

PT-2024-31944 · Teedy · Teedy

Name of the Vulnerable Software and Affected Versions: Teedy version 1.11 Description: The issue is related to Cross Site Scripting XSS via the management console. This allows for potential account takeover. Recommendations: For Teedy version 1.11, as a temporary workaround, consider restricting...

RHEL 8 / 9 : OpenShift Container Platform 4.15.35 (RHSA-2024:7182)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7182 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...