872 matches found
The vulnerability of the software for automated, cloud-based, and on-premise administration of IBM Security Verify Privilege accounts stems from lack of access control mechanisms. This allows attackers to exploit the vulnerabilities to disclose protected information.
The vulnerability of the software for automated, cloud-based, and on-premise administration of IBM Security Verify Privilege accounts is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information through a specially...
How to remove a node from a cluster in on-premise Endpoint Management
This guide provides step-by-step instructions on how to remove a node from your on-premise Endpoint Management cluster. The process involves shutting down the node intended for decommission. The Endpoint Management system's Hazelcast service will then recognize the node as inactive and...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.35 security update
Red Hat OpenShift Container Platform release 4.13.35 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whi...
Update now! ConnectWise ScreenConnect vulnerability needs your attention
ConnectWise is warning self-hosted and on-premise customers that they need to take immediate action to remediate a critical vulnerability in its ScreenConnect remote desktop software. This software is typically used in data-centers and for remote assistance. Together ConnectWise’s partners manage...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update
Red Hat OpenShift Container Platform release 4.14.13 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
SureMDM On-Premise CAPTCHA Bypass / User Enumeration
Exploit Title: SureMDM On-premise 6.31 - CAPTCHA Bypass User Enumeration Date: 05/12/2023 Exploit Author: Jonas Benjamin Friedli Vendor Homepage: https://www.42gears.com/products/mobile-device-management/ Version: = 6.31 Tested on: 6.31 CVE : CVE-2023-3897 import requests import sys def printhelp...
SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration Exploit
Exploit Title: SureMDM On-premise 6.31 - CAPTCHA Bypass User Enumeration Exploit Author: Jonas Benjamin Friedli Vendor Homepage: https://www.42gears.com/products/mobile-device-management/ Version: = 6.31 Tested on: 6.31 CVE : CVE-2023-3897 import requests import sys def printhelp: print"Usage:...
SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration
Exploit Title: SureMDM On-premise 6.31 - CAPTCHA Bypass User Enumeration Date: 05/12/2023 Exploit Author: Jonas Benjamin Friedli Vendor Homepage: https://www.42gears.com/products/mobile-device-management/ Version: = 6.31 Tested on: 6.31 CVE : CVE-2023-3897 import requests import sys def printhelp...
The vulnerability of the Avalanche Premise mobile device management system, which stems from the lack of load limits on files, allows a perpetrator to execute arbitrary code.
The vulnerability of the Avalanche Premise mobile device management system lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.11.58 packages and security update
Red Hat OpenShift Container Platform release 4.11.58 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
VulnCheck KEV: CVE-2021-30497
Ivanti Avalanche Premise 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.30 security update
Red Hat OpenShift Container Platform release 4.13.30 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
CVE-2023-52327
Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328...
CVE-2023-52326
Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...
CVE-2023-52328
Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329...
CVE-2023-52326
Certain dashboard widgets on Trend Micro Apex Central on-premise are vulnerable to cross-site scripting XSS attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327...
PT-2024-14527 · Trend Micro · Trend Micro Apex Central
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central on-premise affected versions not specified Description: The issue concerns certain dashboard widgets in Trend Micro Apex Central that are susceptible to cross-site scripting XSS attacks. These attacks may potentially...
PT-2024-14525 · Trend Micro · Trend Micro Apex Central
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central on-premise affected versions not specified Description: The issue concerns certain dashboard widgets in Trend Micro Apex Central that are susceptible to cross-site scripting XSS attacks. These attacks may potentially...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update
Red Hat OpenShift Container Platform release 4.13.27 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
