CVE-2024-2481

A vulnerability, which was classified as critical, was found in Surya2Developer Hostel Management System 1.0. Affected is an unknown function of the file /admin/manage-students.php. The manipulation of the argument del leads to improper access controls. It is possible to launch the attack remotel...

CVE-2024-2481

A vulnerability, which was classified as critical, was found in Surya2Developer Hostel Management System 1.0. Affected is an unknown function of the file /admin/manage-students.php. The manipulation of the argument del leads to improper access controls. It is possible to launch the attack remotel...

CVE-2024-2481

CVE-2024-2481 affects Surya2Developer Hostel Management System 1.0. The vulnerability is in an unknown function of the file /admin/manage-students.php where manipulation of the del argument leads to improper access controls. It can be exploited remotely, and the exploit has been disclosed publicl...

Incorrect Authorization

org.apache.pulsar, pulsar-broker is vulnerable to Incorrect Authorization. The vulnerability exists due to inadequate access controls to modify topic-level policies. Only users with the tenant admin or super user role should be permitted to perform such management operations, allowing authenticat...

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-0313

Technical details about CVE-2024-0313 are not present in the provided documents. The connected records do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-1222 Incorrect authorization controls in PaperCut NG/MF APIs

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls...

CVE-2024-1222 Incorrect authorization controls in PaperCut NG/MF APIs

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls...

CVE-2024-1221 Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF...

CVE-2024-1221 Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF...

PT-2024-15463 · Skyhigh +1 · Skyhigh Client Proxy +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A malicious insider exploiting this issue can circumvent existing security controls put in place by the organization. If the victim is using a temporary...

Vinchin Backup And Recovery 7.2 Command Injection

CVE ID: CVE-2024-25228 Title: Authenticated Command Injection Vulnerability in ManoeuvreHandler.class.php of Vinchin Backup & Recovery Versions 7.2 and Earlier Description: A critical security vulnerability has been discovered in the getVerifydiyResult function within the ManoeuvreHandler.class.p...

U.S. Dept Of Defense: Authentication Bypass on https://███████/

An authentication bypass vulnerability was discovered on https://████████/. By visiting /███████/GxSessionIfc.php, a valid session was created for the user, allowing them to bypass the authentication requirement and access the site...

TIBCO Security Advisory: March 12, 2024 - TIBCO ActiveSpaces - CVE-2024-1137

TIBCO ActiveSpaces Information Leak Vulnerability Original release date: March 12, 2024 Last revised: --- Source: TIBCO Software Inc. Products Affected TIBCO ActiveSpaces - Enterprise Edition versions 4.4.0 through 4.9.0 The following components are affected: Proxy Client Description The componen...

TIBCO Security Advisory: March 12, 2024 - TIBCO ActiveSpaces - CVE-2024-1137

TIBCO ActiveSpaces Information Leak Vulnerability Original release date: March 12, 2024 Last revised: --- Source: TIBCO Software Inc. Products Affected TIBCO ActiveSpaces - Enterprise Edition versions 4.4.0 through 4.9.0 The following components are affected: Proxy Client Description The componen...

PT-2024-2104 · Microsoft · Windows Usb Print Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Print Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows USB Print Driver, allowing an attacker to potentially elevate their privileges. There is no...

PT-2024-2149 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access restrictions in the editor, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there ...

PT-2024-2293 · Microsoft · Azure Kubernetes Service

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service affected versions not specified Description: The issue is related to insufficient access controls in the deployment and management of confidential containers in Azure Kubernetes Service. Exploitation of this...