CVE-2024-11772

Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-11639

The connected sources confirm multiple vulnerabilities in Ivanti Endpoint Manager Cloud Services Appliance (Ivanti CSA) prior to version 5.0.3. Specifically: authentication bypass in the admin web console (CVE-2024-11639) that could grant remote admin access; command injection (CVE-2024-11772) re...

PT-2024-9378 · Ivanti · Ivanti Csa

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.3 Description: The issue is related to an authentication bypass in the admin web console of Ivanti CSA, allowing a remote unauthenticated attacker to gain administrative access. There is no evidence of...

CVE-2024-11773: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

PT-2024-9374

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.3 Description: The issue is related to command injection in the admin web console of Ivanti CSA, allowing a remote authenticated attacker with admin privileges to achieve remote code execution. This is due to...

CVE-2024-11772: Improper Neutralization of Special Elements used in a Command

Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-11639: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access...

PT-2024-9375 · Ivanti · Ivanti Cloud Services Appliance

Name of the Vulnerable Software and Affected Versions: Ivanti Cloud Services Appliance versions prior to 5.0.3 Description: The issue is related to a lack of protection against SQL query structure exploitation in the admin web console of Ivanti Cloud Services Appliance. This allows a remote...

CVE-2023-28168

Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Console: from n/a through 0.3.9...

CVE-2023-28168 WordPress WordPress Console plugin <= 0.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Console: from n/a through 0.3.9...

CVE-2023-28168 WordPress WordPress Console plugin <= 0.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Console: from n/a through 0.3.9...

CVE-2023-28168

CVE-2023-28168 affects the WordPress Console plugin (

PT-2024-12156

Name of the Vulnerable Software and Affected Versions Jerod Santo WordPress Console versions 0.3.9 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations For Jerod Santo...

WordPress plugin, WordPress Console security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-28168: Missing Authorization

Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Console: from n/a through 0.3.9...

Veeam Service Provider Console Access Control File Deletion

The vulnerability of the backup and data recovery software for Veeam Service Provider Console VSPC for remote and cloud-based customers is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to delete any files on the VSPC server at...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.70 security update

Red Hat OpenShift Container Platform release 4.12.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Veeam Service Provider Console < 8.1.0.21999 Multiple Vulnerabilities (kb4679)

The version of Veeam Service Provider Console installed on the remote host is prior to 8.1.0.21999. It is, therefore, affected by multiple vulnerabilities as referenced in the kb4679 advisory. - From the VSPC management agent machine, under the condition that the management agent is authorized on...

CVE-2024-41579

DTStack Taier version 1.4.0 is vulnerable to a SQL injection vulnerability because the jobName parameter in the console listNames function is improperly neutralized. This flaw allows remote attackers to manipulate data or gain unauthorized access. To mitigate this risk, it is recommended to disab...

Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console

Veeam has released security updates to address a critical flaw impacting Service Provider Console VSPC that could pave the way for remote code execution on susceptible instances. The vulnerability, tracked as CVE-2024-42448, carries a CVSS score of 9.9 out of a maximum of 10.0. The company noted...