7282 matches found
CVE-2024-42463
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...
CVE-2024-42464
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...
CVE-2024-42464
CVE-2024-42464 affects upKeeper Manager (upKeeper) up to version 5.1.9. The issue is an Authorization Bypass Through User-Controlled Key, where REST’s trust in the system resource can be abused to obtain sensitive data. The root cause is described as an authorization bypass via a user-controlled ...
CVE-2024-42464 Leak of user information
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...
CVE-2024-42463 Leak of organizations messages
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...
CVE-2024-42463
The connected documents provide concrete details for CVE-2024-42463: in upKeeper Manager, versions through 5.1.9 are affected by an Authorization Bypass via a user-controlled key that abuses REST’s trust in system resources to obtain sensitive data. Practical impact is unauthorized access to sens...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authenti...
PT-2024-29960 · Unknown · Upkeeper Manager
Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: An Authorization Bypass Through User-Controlled Key issue exists in upKeeper Manager, allowing an attacker to utilize REST's trust in the system resource to obtain sensitive data...
PT-2024-29959 · Unknown · Upkeeper Manager
Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: The issue allows unauthorized access to sensitive data by exploiting REST's trust in system resources through a user-controlled key. This can lead to an authorization bypass, enabling threa...
The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool allows a perpetrator to expose the protected information.
The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool involves bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to disclose sensitive information by sending specially crafted HTT...
CVE-2024-39642
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LearnPress: from n/a through 4.2.6.8.2...
CVE-2024-39642
CVE-2024-39642 is an Insecure Direct Object References (IDOR) vulnerability in the LearnPress WordPress LMS plugin (versions up to 4.2.6.8.2). The root cause is an Authorization Bypass where a user-controlled key allows accessing functionality not properly constrained by ACLs. Public disclosures ...
Rockwell Automation AADvance Standalone OPC-DA Server
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : AADvance Standalone OPC-DA Server Vulnerabilities : Improper Input Validation, Use of Externally Controlled Format String 2. RISK EVALUATION Successful...
PT-2024-28579 · Thimpress · Learnpress
Name of the Vulnerable Software and Affected Versions: ThimPress LearnPress versions through 4.2.6.8.2 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: Fo...
CVE-2024-6707
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability...
CVE-2024-6707 Open WebUI Arbitrary File Upload + Path Traversal
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability...
CVE-2024-6707
Open WebUI suffers a path traversal and arbitrarily uploaded file vulnerability in version 0.1.105. The flaw arises when uploading files through the HTTP interface (via the + sign in the message input) to a static UPLOAD_DIR; the filename is taken from the request without validation, enabling tra...
GHSA-5FWQ-9X7J-2QPG lorawan-stack Open Redirect vulnerability
lorawan-stack is an open source LoRaWAN network server. Prior to version 3.24.1, an open redirect exists on the login page of the lorawan stack server, allowing an attacker to supply a user controlled redirect upon sign in. This issue may allows malicious actors to phish users, as users assume th...
PT-2024-9525 · Veeam · Veeam Backup & Replication
Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A vulnerability in the remote management interface of Veeam Backup & Replication allows users with certain operator roles to expose saved credentials. This can be achieve...
