CVE-2024-49805

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

CVE-2024-49806

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

CVE-2024-49806

CVE-2024-49806 affects IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8. The root cause is hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. Impact is high on confidentiality, integrity, and availability; CVSS base scor...

PT-2024-33691 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue concerns hard-coded credentials, such as a password or cryptographic key, used by the appliance for its own inbound authentication, outbound...

DEBIAN-CVE-2024-46869

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: Allocate memory for driver private data Fix driver not allocating memory for struct btinteldata which is used to store internal data...

CVE-2024-6876

Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may lead to a crash of the affected service...

CVE-2024-6876

CVE-2024-6876 affects the OSCAT Basic Library. The issue is an out-of-bounds read that allows a local, unprivileged attacker to access limited internal PLC data, potentially causing a crash. Public sources cite OSCAT Basic Library with affected versions; CNNVD notes versions prior to 3.3.5. Some ...

WordPress plugin Modern Events Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

PT-2024-38000

Name of the Vulnerable Software and Affected Versions Guardrails AI affected versions not specified Description The issue concerns RAIL documents, an XML-based format used by Guardrails AI for enforcing formatting checks on LLM outputs. Users who consume RAIL documents from external sources are a...

Sharp MFP Security Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from incorrect credential information to perform certain device functions, which could result in referencing internal information in the device...

ChuanhuChatGPT Code Issue Vulnerability

ChuanhuChatGPT provides a fast and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A code issue vulnerability exists in ChuanhuChatGPT 20240410 and prior versions, which stems from a server-side request forgery vulnerability in the upload processing interface that...

CVE-2024-30420

Server-side request forgery SSRF vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may obtain...

CVE-2023-6805

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 4.4.7 via the fetchfeed functionality. This makes it possible for authenticated attackers,...

PT-2024-3198 · Oracle · Oracle Webcenter Portal

Name of the Vulnerable Software and Affected Versions: Oracle WebCenter Portal version 12.2.1.4.0 Description: The vulnerability in the Oracle WebCenter Portal product is related to insufficient protection of internal data. It allows a remote attacker to gain unauthorized access to read, add,...

PT-2024-22142

Name of the Vulnerable Software and Affected Versions RSSHub versions prior to 1.0.0-master.a429472 Description The issue allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct Denial-of-Servi...

WordPress plugin Friends security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Improper access control

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

PT-2024-3883 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP versions KERNEL 7.53 through KERNEL 7.94 SAP NetWeaver Application Server ABAP version KRNL64UC 7.53 Description: The issue is related to insufficient protection of internal data in the SAP NetWeaver...

CVE-2024-22313

Affected product: IBM Storage Defender - Resiliency Service (2.0). Root cause: hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. Impact (as stated): information disclosure with local access risk (confidentiality impact). Remediation: IBM’...