CVE-2023-47131

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file...

CVE-2023-47131

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file...

CVE-2023-47132

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...

CVE-2023-47132

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...

Design/Logic Flaw

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file...

Code injection

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...

CVE-2023-47132

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...

CVE-2023-47132

An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...

N-able PassPortal Log Information Disclosure Vulnerability

N-able PassPortal is a cloud-based, integrated, automated password protection solution from N-able. A log information disclosure vulnerability exists in N-able PassPortal versions prior to 3.29.2 that originates from inserting sensitive information into log files...

CVE-2023-47131

The CVE-2023-47131 issue affects the N-able PassPortal Chrome extension and is caused by the extension inserting sensitive information into log files in versions prior to 3.29.2. The impact is sensitive data disclosed via logs (as stated across Red Hat, NVD, CVE lists). Remediation is to upgrade ...

CVE-2023-47131

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file...

PT-2024-13410 · N Able · N-Able N-Central

Name of the Vulnerable Software and Affected Versions: N-able N-central versions prior to 2023.6 Description: An issue in N-able N-central allows attackers to gain escalated privileges via API calls. Recommendations: For versions prior to 2023.6, update to version 2023.6 or later to resolve the...

CVE-2023-47131

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file...

N-able N-central Security Vulnerabilities

N-able N-central is an RMM platform from N-able, Inc. providing large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central version 2023.6 and prior versions, which stems from a vulnerability th...

CVE-2023-47132

CVE-2023-47132 pertains to N-able N-central (pre-2023.6) where an API-call related flaw allows privilege escalation. Affected software: N-able N-central before 2023.6; impact is elevated privileges via API calls (no user interaction required). Mitigation: upgrade to version 2023.6 or later (per v...

EulerOS 2.0 SP5 : harfbuzz (EulerOS-SA-2024-1142)

According to the versions of the harfbuzz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking...

CVE-2024-24847

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jgadbois CalculatorPro Calculators allows Reflected XSS.This issue affects CalculatorPro Calculators: from n/a through 1.1.7...

n-hojin.jp Improper Access Control vulnerability OBB-3843787

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

n-select.net Cross Site Scripting vulnerability OBB-3842490

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2019-14223

An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any...