5873 matches found
CVE-2024-1755
The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
BELL-CVE-2024-26728
Bulletin has no description...
BELL-CVE-2024-26709
Bulletin has no description...
BELL-CVE-2024-26657
Bulletin has no description...
BELL-CVE-2024-3094
Bulletin has no description...
CVE-2023-7202
The Fatal Error Notify WordPress plugin before 1.5.3 does not have authorisation and CSRF checks in its testerror AJAX action, allowing any authenticated users, such as subscriber to call it and spam the admin email address with error messages. The issue is also exploitable via CSRF...
The vulnerability of the deleteUpdateAPK() function in the Vinchin Backup & Recovery software allows a hacker to execute arbitrary commands.
The vulnerability of the deleteUpdateAPK function in the Vinchin Backup & Recovery software relates to the lack of measures taken to neutralize special elements used in the operating system’s command when processing the filename parameter. Exploiting this vulnerability allows a malicious actor to...
CVE-2023-50962
IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" HSTS web security policy mechanism. IBM X-Force ID: 276004...
BELL-CVE-2023-6200 CVE-2023-6200 does not affect BellSoft software
Bulletin has no description...
The vulnerability of the BMC (Baseboard Management Controller) on the NVIDIA DGX A100 server allows a hacker to enhance their privileges, gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.
The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the absence of authentication procedures for critical functions. Exploiting this vulnerability allows an attacker to enhance their privileges, gain read, write, or delete access to data, execute...
CVE-2024-21735
SAP LT Replication Server - version S4CORE 103, S4CORE 104, S4CORE 105, S4CORE 106, S4CORE 107, S4CORE 108, does not perform necessary authorization checks. This could allow an attacker with high privileges to perform unintended actions, resulting in escalation of privileges, which has High impac...
PT-2023-12620 · Sympa +1 · Sympa +1
Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.62 Description: The issue relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a sa...
PT-2025-38456
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where cameras with invalid descriptors are not handled correctly. Specifically, if a source entity lacks pads, a link is incorrectly created...
PT-2023-8374 · Ibm · Ibm Security Verify Governance
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue is caused by the lack of encryption for sensitive data. This could allow a remote attacker to disclose protected information. Recommendations: For IBM Security Verify Governan...
BELL-CVE-2023-3439 CVE-2023-3439 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-3355 CVE-2023-3355 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-26606 CVE-2023-26606 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-26544 CVE-2023-26544 does not affect BellSoft software
Bulletin has no description...