2721 matches found
CVE-2023-37244
The CVE-2023-37244 entry concerns AutomationManager.AgentService.exe and describes a TOCTOU race condition that lets standard users create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp. This could enable an attacker to manipulate the process into performing arbitra...
N‑able N-Central 安全漏洞
N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability exists in N-able N-Central that originates in the AutomationManager.AgentService.exe application that contains a TOCTOU contention condition that allows standard users to...
CVE-2024-26989 arm64: hibernate: Fix level3 translation fault in swsusp_save()
In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Fix level3 translation fault in swsuspsave On arm64 machines, swsuspsave faults if it attempts to access MEMBLOCKNOMAP memory ranges. This can be reproduced in QEMU using UEFI when booting with rodata=off...
CVE-2024-26989 arm64: hibernate: Fix level3 translation fault in swsusp_save()
In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Fix level3 translation fault in swsuspsave On arm64 machines, swsuspsave faults if it attempts to access MEMBLOCKNOMAP memory ranges. This can be reproduced in QEMU using UEFI when booting with rodata=off...
Moderate: Red Hat Security Advisory: harfbuzz security update
An update for harfbuzz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Moderate: harfbuzz security update
HarfBuzz is an implementation of the OpenType Layout engine. Security Fixes: harfbuzz: allows attackers to trigger On^2 growth via consecutive marks CVE-2023-25193 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer...
CVE-2024-33566
Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4...
CVE-2024-33566
CVE-2024-33566 affects the Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin (OrderConvo). Public sources in connected docs confirm a Missing Authorization vulnerability that enables OS Command Injection, with the issue affecting OrderConvo versions up to 12.4. Red Hat no...
CVE-2024-33562
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme XStore allows Reflected XSS.This issue affects XStore: from n/a through 9.3.5...
CVE-2024-33571
CVE-2024-33571 is a Reflected XSS vulnerability in VOD Infomaniak (Infomaniak Staff VOD) for WordPress. The vulnerability affects VOD Infomaniak versions from n/a up to 1.5.6 and is triggered via improper input handling during web page generation. The connected Wordfence/KV data confirms the exis...
CVE-2024-4301
N-Reporter and N-Cloud, products of the N-Partner, have an OS Command Injection vulnerability. Remote attackers with normal user privilege can execute arbitrary system commands by manipulating user inputs on a specific page...
CVE-2024-4301 N-Reporter and N-Cloud from N-Partner - Os Command Injection
N-Reporter and N-Cloud, products of the N-Partner, have an OS Command Injection vulnerability. Remote attackers with normal user privilege can execute arbitrary system commands by manipulating user inputs on a specific page...
CVE-2024-4301 N-Reporter and N-Cloud from N-Partner - Os Command Injection
N-Reporter and N-Cloud, products of the N-Partner, have an OS Command Injection vulnerability. Remote attackers with normal user privilege can execute arbitrary system commands by manipulating user inputs on a specific page...
CVE-2024-4301
N-Reporter and N-Cloud (N-Partner) are affected by CVE-2024-4301 through an OS command injection vulnerability that allows remote attackers with low privileges to execute arbitrary system commands by manipulating inputs on a specific page. The vulnerability is described across multiple sources; N...
N-Partner N-Reporter 操作系统命令注入漏洞
N-Partner N-Reporter is an event query and reporting system from China-based N-Partner. An operating system command injection vulnerability exists in N-Reporter and N-Cloud versions prior to 6.1.187 20240216-1603, which stems from the presence of an operating system command injection vulnerabilit...
CVE-2024-33683
Cross-Site Request Forgery CSRF vulnerability in WP Republic Hide Dashboard Notifications.This issue affects Hide Dashboard Notifications: from n/a through 1.2.3...
CVE-2024-33682
Cross-Site Request Forgery CSRF vulnerability in Cookie Information A/S WP GDPR Compliance.This issue affects WP GDPR Compliance: from n/a through 2.0.23...
CVE-2024-4077
CVE-2024-4077 targets AndonDesign UDesign (WordPress theme). The vulnerability is an improper neutralization of input during web page generation, enabling a Reflected XSS. Affected version range is UDesign: n/a through 4.7.3. CVSS v3.1 base score 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L); attack ...