8695 matches found
CVE-2023-24471
CVE-2023-24471 is a vulnerability in Nozomi Networks Guardian/CMC prior to version 22.6.2 where access-control restrictions on actual assertions are not enforced in the debug functionality. An authenticated user with reduced visibility can access data normally restricted in the Query and Assertio...
CVE-2023-24471 Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2
An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normal...
Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2
Summary An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. Impact An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data th...
PT-2023-24016 · Prtg · Prtg
Name of the Vulnerable Software and Affected Versions: PRTG versions 23.2.84.1566 and earlier Description: A command injection issue was identified in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially...
CVE-2023-32781
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...
PT-2023-19628 · Nozomi Networks · Cmc +1
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An access control issue was found due to restrictions not being enforced in the debug functionality. This allows an authenticated user with reduced visibility to obtain unauthorized...
Nextcloud: user_ldap app logs user passwords in the log file on level debug
User passwords were logged in Nextcloud application logs when using LDAP authentication and debug log level settings...
Medium: cups
Issue Overview: OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers...
Medium: cups
Issue Overview: OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers...
Hardware allows activation of test or debug logic
Hardware allows activation of test or debug logic at runtime for some IntelR processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Apache ShardingSphere Deserialization Vulnerability
The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability that is caused by improper access control of the Android Debug Bridge ADB. ...
TeleAdapt RoomCast TA-2400 Elevation of Privilege Vulnerability
The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability, which is caused by improper privilege management in the Android Debug Brid...
CVE-2023-33745
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access without requiring a password...
CVE-2023-33743
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge adb is available...
Improper access control
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge adb is available...
TeleAdapt RoomCast TA-2400 安全漏洞
The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability that is caused by improper access control of the Android Debug Bridge ADB. ...
TeleAdapt RoomCast TA-2400 安全漏洞
The TeleAdapt RoomCast TA-2400 is an all-in-one, self-contained, top-of-the-line content streaming box for guest rooms from TeleAdapt UK. The TeleAdapt RoomCast TA-2400 suffers from an elevation of privilege vulnerability, which is caused by improper privilege management in the Android Debug Brid...
PT-2023-24470 · Teleadapt · Teleadapt Roomcast Ta-2400
Name of the Vulnerable Software and Affected Versions: TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 Description: The issue concerns Improper Privilege Management. After establishing an adb connection, accessing the shell and entering the su command provides root access without requiring a...
CVE-2023-33743
The CVE-2023-33743 entry concerns TeleAdapt RoomCast TA-2400 (versions 1.0–3.1) with an improper access control flaw due to Android Debug Bridge (adb) being available. Public sources in the dataset describe an elevation of privilege risk and root-level access implications stemming from adb exposu...
PT-2025-54107
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3-09759-gc5666c912155 Description The Linux kernel contains an issue within the s390/vmem subsystem. A flaw exists where the kernel crashes during boot when debug pagealloc is enabled, specifically after...