18632 matches found
Vulnerabilities fixed in Juniper Junos OS and Junos OS Evolved
Vulnerabilities have been found and fixed in Juniper Junos OS and Junos OS Evolved. The vulnerabilities allow a malicious party to carry out attacks that can lead to denial-of-service DoS, access to sensitive information, execution of code with increased user privileges and bypassing a security...
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software, related to permission processing errors, allows a intruder to gain unauthorized access to protected information.
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Amazon Linux 2 : firefox (ALASFIREFOX-2024-026)
The version of firefox installed on the remote host is prior to 115.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-026 advisory. RESERVEDNOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/CVE-2022-2205 CVE-2022-2205 An attack...
OpenSearch Observability does not properly restrict access to private tenant resources
Summary An issue in the OpenSearch observability plugins allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessing resources in a private tenant, leading to potential data being revealed. Impact The la...
Decidim vulnerable to data disclosure through the embed feature
Impact If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embedded such as a Participatory Process, an Assembly, a Proposal, a Result, etc, then some data of this resource could be accessed. Patches version 0.27.6...
IBM FlashSystem 5300 Authentication Error Vulnerability
The IBM FlashSystem 5300 is an IBM storage enterprise system from International Business Machines IBM that stores data on flash memory. The IBM FlashSystem 5300 suffers from an authentication error vulnerability that could be exploited by an attacker to cause loss of access to data using a USB po...
PT-2024-5573
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 21.4R3-S7-EVO Juniper Networks Junos OS Evolved version 22.2-EVO Juniper Networks Junos OS Evolved versions 22.2-EVO through 22.2R3-S4-EVO Juniper Networks Junos OS Evolved versions 22.3-EVO...
Decidim security breach
Decidim is a participatory democracy framework, written in Ruby on Rails. A security vulnerability exists in versions of Decidim prior to 0.27.6, which stems from the ability to access certain data from an unpublished or private resource if an attacker can infer the slug or URL of that resource...
Vulnerabilities fixed in Siemens Products
Siemens has fixed vulnerabilities in various products such as Mendix, RUGGEDOM, SIMATIC, SINEMA, SIPROTEC and the Engineering Platforms for various systems. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: -...
CVE-2024-35256
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...
CVE-2024-4102 Pricing Table <= 2.0.1 - Missing Authorization
The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax function in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthoriz...
CVE-2024-37173
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify...
WordPress plugin Pricing Table security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
WordPress plugin Houzez Theme - Functionality Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-6163
Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...
CVE-2024-6163
Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...
CVE-2024-6163
CVE-2024-6163 concerns Checkmk itself; multiple sources describe a vulnerability in certain http endpoints that allows a remote attacker to bypass authentication and access data. Affected versions are Checkmk < 2.3.0p10, < 2.2.0p31, < 2.1.0p46, and
CVE-2024-6163 local IP restriction of internal HTTP endpoints
Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...
CVE-2024-6163 local IP restriction of internal HTTP endpoints
Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...
