12093 matches found
CVE-2024-11597
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...
CVE-2024-11597
CVE-2024-11597 affects Ivanti Performance Manager. Insecure permissions under specific conditions in versions 2024.3 HF1, 2024.1 HF1, and 2023.3 HF1 allow a local authenticated attacker to achieve local privilege escalation. The issue is rooted in improper privilege handling within the software. ...
CVE-2024-11597
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...
CVE-2024-11597
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...
December 2024 Security Advisory Ivanti Performance Manager (CVE-2024-11597)
Summary Ivanti has released updates for Performance Manager which address one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...
CVE-2024-11597: Incorrect Default Permissions
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...
Ivanti Performance Manager 安全漏洞
Ivanti Performance Manager is a server and application performance management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Performance Manager that stems from improper privilege management. An attacker could exploit the vulnerability to elevate privileges...
PT-2024-17127 · Ivanti · Ivanti Performance Manager
Name of the Vulnerable Software and Affected Versions: Ivanti Performance Manager versions prior to 2024.3 HF1 Ivanti Performance Manager versions prior to 2024.1 HF1 Ivanti Performance Manager versions prior to 2023.3 HF1 Description: Under specific circumstances, insecure permissions in Ivanti...
Amazon Linux 2022 : golang, golang-bin, golang-misc (ALAS2022-2022-009)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-009 advisory. A vulnerability was found in archive/zip of the Go standard library. Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files. CVE-2021-33196...
WordPress Swift Performance Lite plugin <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability
Unauthenticated Local PHP File Inclusion via 'ajaxify' vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Swift Performance Lite versions = 2.3.7.1...
CVE-2024-10516
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
Akamai IP Accelerator: A Holistic Approach to Security and Performance
...
Exploit for CVE-2024-10516
CVE-2024-10516 Swift Performance Lite = 2.3.7.1 - Unauthentic...
CVE-2024-52798
A flaw was found in path-to-regexp. A path-to-regexp turns path strings into regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Mitigation Avoid using two parameters within a single path segment when the separato...
PT-2024-16334
Name of the Vulnerable Software and Affected Versions Swift Performance Lite plugin for WordPress versions up to, and including, 2.3.7.1 Description The issue allows unauthenticated attackers to include and execute arbitrary files on the server via the ajaxify function, enabling the execution of...
WordPress plugin Swift Performance Lite 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
CVE-2024-10516: Improper Limitation of a Pathname to a Restricted Directory
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of...
CVE-2024-52798
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...