665 matches found
CBL Mariner 2.0 Security Update: mysql (CVE-2025-30689)
The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30689 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...
CVE-2025-39202
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data corruption...
CVE-2025-39202
CVE-2025-39202 concerns Hitachi MicroSCADA X SYS600, specifically the Monitor Pro interface. An authenticated user with low privileges can both view and overwrite files, enabling information disclosure and data corruption. Multiple connected sources (NVD, Red Hat, CIRCL, CISA ICS advisory, etc.) ...
Helmholz myREX24、MB Connect Line mymbCONNECT24和MB Connect Line mbCONNECT24 安全漏洞
MB Connect Line mbCONNECT24 and others are products of MB Connect Line, Germany.MB Connect Line mbCONNECT24 is a suite of remote service portals.MB Connect Line mymbCONNECT24 is an on-premise remote maintenance for virtual environments. Helmholz myREX24 and others are products of Helmholz. Helmho...
CVE-2025-49214
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this...
CVE-2025-5141
A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager BoKS on versions 7.2.0 up to 7.2.0.17, 8.1.0 up to 8.1.0.22, 8.1.1 up to 8.1.1.7, 9.0.0 up to 9.0.0.1 and also legacy tar installs of BoKS 7.2 without hotfix 0474 on Linux, AIX, and Solaris allows low privilege...
CVE-2025-4680
Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects upKeeper Instant Privilege Access: before 1.4.0...
CVE-2025-4681
Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: before 1.4.0...
CVE-2025-4681
CVE-2025-4681 affects upKeeper Instant Privilege Access (upKeeper). Root cause: improper privilege management leading to privilege abuse. Affected versions: before 1.4.0. Impact: high, with local attacker privilege escalation potential affecting confidentiality, integrity, and availability. Explo...
CVE-2025-4680
Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects upKeeper Instant Privilege Access: before 1.4.0...
PT-2025-24636 · Unknown · Upkeeper Instant Privilege Access
Name of the Vulnerable Software and Affected Versions: upKeeper Instant Privilege Access versions prior to 1.4.0 Description: The issue is related to Improper Privilege Management, allowing Privilege Abuse in upKeeper Instant Privilege Access. Recommendations: For versions prior to 1.4.0, update ...
upKeeper Instant Privilege Access 安全漏洞
upKeeper Instant Privilege Access is a privilege management system from the Swedish company upKeeper. A security vulnerability exists in upKeeper Instant Privilege Access versions prior to 1.4.0, which stems from improper privilege management and could lead to privilege abuse...
PT-2025-24631 · Unknown · Upkeeper Instant Privilege Access
Name of the Vulnerable Software and Affected Versions: upKeeper Instant Privilege Access versions prior to 1.4.0 Description: The issue is related to improper input validation, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions prior ...
listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user
Summary The env and expandenv template functions which is enabled by default in Sprig enables capturing of env variables on the host. While this may not be a problem on single-user super admin installations, on multi-user installations, this allows non-super-admin users with campaign or template...
CVE-2025-40668 Incorrect Authorization vulnerability in TCMAN GIM
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in...
Zero-Trust Foundation Models: a New Paradigm for Secure and Collaborative Artificial Intelligence for Internet of Things
This paper focuses on Zero-Trust Foundation Models ZTFMs, a novel paradigm that embeds zero-trust security principles into the lifecycle of foundation models FMs for Internet of Things IoT systems. By integrating core tenets, such as continuous verification, least privilege access LPA, data...
Zero Trust Cybersecurity: Procedures and Considerations in Context
In response to the increasing complexity and sophistication of cyber threats, particularly those enhanced by advancements in artificial intelligence, traditional security methods are proving insufficient. This paper explores the Zero Trust cybersecurity framework, which operates on the principle ...
CVE-2024-48925
Umbraco, a free and open source .NET content management system, has an improper access control issue starting in version 14.0.0 and prior to version 14.3.0. The issue allows low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to th...
CVE-2024-41905
A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V2.0. The affected application do not have access control for accessing the files. This could allow an authenticated attacker with low privilege's to get access to sensitive information...