231583 matches found
CVE-2024-27198
CVE-2024-27198 affects JetBrains TeamCity prior to 2023.11.4, where an authentication bypass enables attackers with no privileges to perform admin actions and potentially achieve remote code execution (RCE). Connected PoC/documentation detail a bypass that abuses a REST API routing flaw via an un...
Design/Logic Flaw
IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses. IBM X-Force ID: 260814...
Information disclosure
IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 240453...
Cross site request forgery (csrf)
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the /system/share/ztreecategoryedit...
CVE-2023-38362
IBM CICS TX Advanced 10.1 is affected by an information-disclosure vulnerability where observable differences in HTTP responses could expose sensitive data. The root cause is an observable discrepancy in HTTP responses that could be exploited by a remote attacker; CVSSv3.1 base score 5.3 (Medium)...
CVE-2023-5451
The issue is a Reflected XSS vulnerability in Forcepoint Next Generation Firewall Security Management Center (SMC Downloads feature). Affects NGFW SMC downloads path, with improper neutralization of input during web page generation. Impact is reflected XSS that could affect users visiting crafted...
CVE-2022-43890
CVE-2022-43890 affects IBM Security Verify Privilege On-Premises (IBM Security Verify Privilege On-Premises 11.5 and earlier). Root cause: inadequate protection of sensitive information, leading to information disclosure via an HTTP request and potential use to support further attacks. Impact: ex...
Authentication flaw
Rejected reason: Incorrect assignment...
Cross site scripting
Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...
Cross site scripting
A Cross-site scripting XSS vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750A1FWv101b03 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2024-24901
CVE-2024-24901 affects Dell PowerScale OneFS 8.2.x–9.6.0.x with an insufficient logging vulnerability that allows a local high-privilege attacker to cause audit messages to be lost/unrecorded for a period. Root cause: inadequate audit logging coverage. Impact: potential gaps in auditing (low seve...
CVE-2024-22463
Dell PowerScale OneFS versions 8.2.x through 9.6.0.x are affected by a vulnerability described as the use of a broken or risky cryptographic algorithm, which can lead to disclosure and integrity concerns for sensitive data. The issue is triggered by the software’s cryptographic implementation rat...
Race condition
Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing...
Design/Logic Flaw
Dell Digital Delivery, versions prior to 5.0.86.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to an application crash or execution of arbitrary code...
CVE-2024-0155
Dell Digital Delivery before version 5.2.0.0 contains a Use After Free vulnerability rooted in memory management, exploitable by a local, low-privilege attacker to crash the application or execute arbitrary code. Affected software is Dell Digital Delivery ( Dell ). Remediation: upgrade to 5.2.0.0...
Memory corruption
Memory corruption while processing the IOCTL FM HCI WRITE request...
Authentication flaw
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number...
Memory corruption
Memory corruption while processing MBSSID beacon containing several subelement IE...