3105 matches found
PT-2024-24270 · Ibm · Ibm Storage Scale Gui
Name of the Vulnerable Software and Affected Versions: IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6 IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1 Description: A local privilege escalation issue exists, allowing a malicious actor with command line access to the scalemgmt user to...
CVE-2024-52901
IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation...
[SECURITY] Fedora 40 Update: iaito-5.9.9-2.fc40
iaito is a Qt and C++ GUI for radare2. It is the continuation of Cutter before the fork to keep radare2 as backend. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. The iaito is created by reverse engineers for reverse...
[SECURITY] Fedora 41 Update: iaito-5.9.9-2.fc41
iaito is a Qt and C++ GUI for radare2. It is the continuation of Cutter before the fork to keep radare2 as backend. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. The iaito is created by reverse engineers for reverse...
Windows Tooling Updates: OleView.NET
Posted by James Forshaw, Google Project Zero This is a short blog post about some recent improvements I've been making to the OleView.NET tool which has been released as part of version 1.16. The tool is designed to discover the attack surface of Windows COM and find security vulnerabilities such...
ADC: Unable to delete backup files from GUI
Customer sees 50 backup files on NetScaler GUI whereas same files are not visible on /var/nssysbackup directory. Whenever trying to delete the backup files from GUI it shows "ERROR: Backup file does not exist."...
Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers
Overview UNIVERGE IX/IX-R/IX-V series routers provided by NEC Corporation contain multiple vulnerabilities listed below. Command injection CWE-77 - CVE-2024-11013 Cross-site request forgery WE-352 - CVE-2024-11014 RyotaK of Flatt Security Inc. reported these vulnerabilities to NEC Corporation and...
CVE-2024-53937
An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...
CVE-2024-36467
An authenticated user with API access e.g.: user with default User role, more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group e.g.: Zabbix Administrators, except to groups that are disabled or having restricted GUI access...
CVE-2024-36467
An authenticated user with API access e.g.: user with default User role, more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group e.g.: Zabbix Administrators, except to groups that are disabled or having restricted GUI access...
CVE-2024-36467 Authentication privilege escalation via user groups due to missing authorization checks
An authenticated user with API access e.g.: user with default User role, more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group e.g.: Zabbix Administrators, except to groups that are disabled or having restricted GUI access...
[SECURITY] Fedora 41 Update: qbittorrent-5.0.2-1.fc41
A Bittorrent client using rblibtorrent and a Qt6 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...
CVE-2021-34751 Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This...
CVE-2021-34750 Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability
A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This...
Vulnerability of Fortinet FortiOS operating system graphical interfaces and FortiProxy proxy servers for protecting against Internet attacks, allowing attackers to execute XSS attacks.
The vulnerability of Fortinet’s FortiOS operating system graphical interface and its FortiProxy proxy server for protecting against Internet attacks is related to improper handling of input data during the creation of web pages. Exploiting this vulnerability allows a malicious actor to execute XS...
CVE-2024-47593
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...
CVE-2024-47593
CVE-2024-47593 : SAP NetWeaver Application Server ABAP contains an information disclosure vulnerability. An unauthenticated, network-accessible attacker can read files from the server only if a Web Dispatcher or Proxy is in use and the target file was previously opened or downloaded via an applic...
CVE-2024-47593 Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or...
AMD Management Console Incorrect Default Permissions Vulnerability
Bulletin ID: AMD-SB-9003 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within AMD Management Console Software. AMD Management Console AMC is a GUI-based manageability...