CVE-2022-20003

Technical details are not publicly available in the provided documents for CVE-2022-20003. Connected sources show reports/mentions (Debian/Ubuntu/CNNVD) with no explicit vulnerability specifics. Monitor for updates.

CVE-2023-40321

Technical details for CVE-2023-40321 are not provided in the supplied documents. No confirmed affected products, impact, or fixes are disclosed here. Monitor connected sources (Ubuntu/CVE references) for updates.

CVE-2023-40316

Based on connected documents, CVE-2023-40316 is referenced as an unpatched vulnerability in Linux distributions (notably Ubuntu). The Nessus unpatched plugin notes affected Ubuntu packages with no vendor-supplied patch available, implying an unresolved issue on Linux hosts until a vendor fix is r...

CVE-2023-40318

CVE-2023-40318 is documented in connected Nessus and Ubuntu records as an unpatched vulnerability affecting Linux/Ubuntu packages, with no vendor patch available at the time of assessment. Ubuntu reference shows an entry for CVE-2023-40318; Nessus plugin UNPATCHED_CVE_2023_40318.NASL states Ubunt...

CVE-2023-40324

CVE-2023-40324 is linked to unpatched Linux distributions per Nessus data. The connected UNPATCHED_CVE_2023_40324.NASL plugin indicates one or more packages on Linux/Ubuntu are affected with no vendor-provided patch available, referencing an Ubuntu entry for CVE-2023-40324. The information does n...

CVE-2023-40323

Nessus plugin UNPATCHED_CVE_2023_40323.NASL reports an unpatched vulnerability for CVE-2023-40323 on Ubuntu Linux packages; no vendor patch is available per the plugin. The document does not specify affected Ubuntu package names or versions.

CVE-2014-5515

According to the Ubuntu security entry for CVE-2014-5515, ntopng had several vulnerabilities that were fixed upstream in version 1.2.1. The connected records provide no further details (affected versions, root cause, impact, or exploit information). No MITRE/attack details are included. Remediati...

CVE-2014-5511

Removed by vendor...

CVE-2014-5511

NTOPNG is affected by CVE-2014-5511; upstream fixes were released in version 1.2.1. The Ubuntu entry notes several vulnerabilities fixed in 1.2.1, suggesting prior versions prior to 1.2.1 contained exploitable issues. The Debian/Ubuntu pages confirm the CVE exists and reference the 1.2.1 fix with...

CVE-2014-5513

Removed by vendor...

CVE-2014-5514

CVE-2014-5514 is represented as a reserved placeholder in the Initial document. The connected Ubuntu entry notes that ntopng had several vulnerabilities fixed upstream in version 1.2.1, which provides a remediation reference, but the provided materials do not include concrete technical details (a...

CVE-2014-5512

Removed by vendor...

CVE-2014-5512

CVE-2014-5512 is associated with ntopng; Ubuntu notes indicate several vulnerabilities fixed upstream in version 1.2.1. Debian entry was removed by vendor. No specific exploitation details are provided in the connected sources. Mitigation mentioned: upgrade to ntopng 1.2.1 or later as per upstrea...

CVE-2022-2205

Technical details for CVE-2022-2205 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-9586

CVE-2014-9586 involves a lack of bounds checking in protocol parsing C++ code emitted by the binpac utility, as described by the Ubuntu security page. The connected Debian/OSV entries provide reservation/no detailed technical info, while the Ubuntu entry confirms the root cause but does not suppl...

CVE-2024-25635

alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organization owners using the http://192.168.26.128:8080/admin/api/users/ endpoint, which exposes the details of the provided user ID. This may...

CVE-2024-25635 IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS

alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organization owners using the http://192.168.26.128:8080/admin/api/users/ endpoint, which exposes the details of the provided user ID. This may...

CVE-2024-25635 IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS

alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organization owners using the http://192.168.26.128:8080/admin/api/users/ endpoint, which exposes the details of the provided user ID. This may...

CVE-2022-4094

Technical details for CVE-2022-4094 are not publicly available in the provided documents; no affected products, impact, or remediation are described. Monitor for updates.

PT-2024-21055 · Alf.Io · Alf.Io

Name of the Vulnerable Software and Affected Versions: alf.io versions prior to 2.0-Mr-2402 Description: The issue allows organization owners to view the generated API KEY and USERS of other organization owners. This is achieved through the "http://192.168.26.128:8080/admin/api/users/" endpoint,...