PT-2024-15463 · Skyhigh +1 · Skyhigh Client Proxy +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A malicious insider exploiting this issue can circumvent existing security controls put in place by the organization. If the victim is using a temporary...

U.S. Dept Of Defense: Authentication Bypass on https://███████/

An authentication bypass vulnerability was discovered on https://████████/. By visiting /███████/GxSessionIfc.php, a valid session was created for the user, allowing them to bypass the authentication requirement and access the site...

TIBCO Security Advisory: March 12, 2024 - TIBCO ActiveSpaces - CVE-2024-1137

TIBCO ActiveSpaces Information Leak Vulnerability Original release date: March 12, 2024 Last revised: --- Source: TIBCO Software Inc. Products Affected TIBCO ActiveSpaces - Enterprise Edition versions 4.4.0 through 4.9.0 The following components are affected: Proxy Client Description The componen...

TIBCO Security Advisory: March 12, 2024 - TIBCO ActiveSpaces - CVE-2024-1137

TIBCO ActiveSpaces Information Leak Vulnerability Original release date: March 12, 2024 Last revised: --- Source: TIBCO Software Inc. Products Affected TIBCO ActiveSpaces - Enterprise Edition versions 4.4.0 through 4.9.0 The following components are affected: Proxy Client Description The componen...

PT-2024-2104 · Microsoft · Windows Usb Print Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Print Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows USB Print Driver, allowing an attacker to potentially elevate their privileges. There is no...

PT-2024-2149 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access restrictions in the editor, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there ...

PT-2024-2293 · Microsoft · Azure Kubernetes Service

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service affected versions not specified Description: The issue is related to insufficient access controls in the deployment and management of confidential containers in Azure Kubernetes Service. Exploitation of this...

PT-2024-2298 · Microsoft · Authenticator

Name of the Vulnerable Software and Affected Versions: Microsoft Authenticator affected versions not specified Description: The issue is related to insufficient access controls in the Microsoft Authenticator application, which can be exploited to elevate privileges. Recommendations: At the moment...

PT-2024-2077 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to bypass security restrictions and elevate privileges. An...

CVE-2024-1442

A flaw was found in Grafana, where setting the Grafana API Data Source UID to '' Grants Unrestricted Access, grants a user the ability to set the UID to '' via the Grafana API poses a severe security risk. This issue enables unauthorized access to read, query, edit, and delete all data sources...

CVE-2024-1382

The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the ndrstlayout attribute of the ndrstsearch shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and...

Design/Logic Flaw

The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the ndrstlayout attribute of the ndrstsearch shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and...

Improper Authorization

github.com/1Panel-dev/1Panel/ is vulnerable to Improper Authorization. The vulnerability is due to insufficient access controls, allowing attackers to exploit the application to gain unauthorized access to the console page...

BIT-APACHE-2023-25690 Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the...

Improper Authorization

github.com/stacklok/minder is vulnerable to Improper Authorization. The vulnerability due to improper input validation and insufficient access controls in handlersrepositories.go file by using GetRepository function, allowing users to manipulate the query parameters to access or delete repositori...

PT-2024-4849 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 Description: The issue is related to improper privilege management in the PowerScale OneFS operating system, which could allow a local high-privileged attacker to gain unauthorized...

Access Control Bypass

sulu/sulu is vulnerable to Access Control Bypass. The vulnerability is due to a misconfiguration or flaw in the implementation of role-based access controls, permission checks or security settings, enabling users to bypass intended restrictions, which can leads to a significant security risk...

Multilaser RE160, Multilaser RE160V Security Vulnerabilities

The Multilaser RE160V and Multilaser RE160 are both wireless routers from Multilaser. A security vulnerability exists in the Multilaser RE160 v5.07.51ptMTL01 and v5.07.52ptMTL01 versions, Multilaser RE160V v12.03.01.08pt and V12.03.01.09pt versions, Multilaser RE163V v12.03. 01.08pt versions,...

CVE-2024-1236

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Filterable Controls label icon parameter in all versions up to, and including, 5.9.8 due to insufficient input sanitization...

WordPress Plugin Essential Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...