CVE-2024-1579

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

CVE-2024-1579 Insufficient seeding of random number generator

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

CVE-2024-1579 Insufficient seeding of random number generator

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

CVE-2024-1579

The CVE concerns Secomea GateManager, specifically the Webserver modules, with an underlying flaw in the PRNG seeding. The root cause is Incorrect Usage of Seeds in the PRNG, which can lead to session hijacking. Affected/version info: GateManager before 11.2.624071020. Documented impact indicates...

Doctor Appointment Management System 1.0 Cross Site Scripting

Application Name: Doctor Appointment Management System Software Link: Download Link Vendor Homepage: Vendor Homepage BuG: XsS BUGAuthor: SoSPiro Version: 1.0 CVE: CVE-2024-4293 Vulnerable code section: - http://localhost/Doctor-Appointment-SystemPHP/dams/doctor/appointment-bwdates.php - Lines 57-...

PT-2024-18147 · Secomea · Secomea Gatemanager

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 11.2.624071020 Description: The issue is related to the incorrect usage of seeds in the Pseudo-Random Number Generator PRNG in the Secomea GateManager's Webserver modules, allowing session hijacking...

CVE-2023-51710

EMS SQL Manager 3.6.2 (build 55333) for Oracle is affected by a DLL hijacking vulnerability that can allow a local user to execute arbitrary code on product startup. Root cause: DLL hijack during launch. Impact per sources: arbitrary code execution with LOW confidentiality/integrity/availability ...

Oracle EMS SQL Manager 安全漏洞

Oracle EMS SQL Manager is a database management tool from Oracle Corporation USA. A security vulnerability exists in Oracle EMS SQL Manager version 3.6.2 that originates from allowing DLL hijacking, which allows users to trigger arbitrary code execution...

PT-2024-14254 · Unknown · Ems Sql Manager

Name of the Vulnerable Software and Affected Versions: EMS SQL Manager version 3.6.2 build 55333 for Oracle Description: The issue allows DLL hijacking, enabling a user to trigger the execution of arbitrary code every time the product is executed. Recommendations: For EMS SQL Manager version 3.6....

CVE-2023-51710

EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2023-51710

EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

RHEL 6 / 7 : rh-ruby22-ruby (RHSA-2018:0583)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0583 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 / 7 : rh-ruby23-ruby (RHSA-2018:0585)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0585 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2017:3485)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3485 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

PT-2024-25431 · Veritas · Veritas Backup Exec

Name of the Vulnerable Software and Affected Versions: Veritas Backup Exec versions prior to 22.2 HotFix 917391 Description: An issue was discovered that allows for DLL Hijacking in the Windows DLL Search path due to improper access controls. Recommendations: For versions prior to 22.2 HotFix...

Veritas Technologies Backup Exec 安全漏洞

Veritas Technologies Backup Exec is a powerful suite of data backup recovery tools from Veritas Technologies, USA. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies the installation process and improves manageability...

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

CVE-2024-33673

CVE-2024-33673 affects Veritas Backup Exec before 22.2 HotFix 917391. The issue is improper access controls that enable DLL hijacking in the Windows DLL search path. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required, no user interaction. Impa...