2441 matches found
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2023-32482
Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...
CVE-2023-32482
Dell Wyse Management Suite is affected by an improper authorization vulnerability (CVE-2023-32482) where an authenticated user with privileged access can push policies to unauthorized tenant groups. The CVE entry indicates affected software: Wyse Management Suite versions prior to 4.0; the CNVD/D...
CVE-2021-45094
Imprivata Privileged Access Management (formerly Xton Privileged Access Management) version 2.3.202112051108 contains a cross-site scripting (XSS) vulnerability. The issue is documented across multiple sources (NVD/CNNVD and related catalogs). The available data confirms the vulnerability title a...
CVE-2021-45094
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
CVE-2021-45094
Imprivata Privileged Access Management formally Xton Privileged Access Management 2.3.202112051108 allows XSS...
Low: perl-HTTP-Daemon
Issue Overview: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based...
CVE-2023-22046
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2023-22008
CVE-2023-22008 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.33 and earlier. An attacker with network access through multiple protocols and high privileges can cause a hang or frequent crash (DoS) of MySQL Server (CVSS 4.9, AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Connected sourc...
CVE-2023-23777
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.18 and below may allow a privileged attacker to execute arbitrary bash commands via crafted cli backup parameters...
Mastodon Social Network Patches Critical Flaws Allowing Server Takeover
Mastodon, a popular decentralized social network, has released a security update to fix critical vulnerabilities that could expose millions of users to potential attacks. Mastodon is known for its federated model, consisting of thousands of separate servers called "instances," and it has over 14...
CVE-2023-35974
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2023-21641
CVE-2023-21641 concerns Qualcomm display-related code. A local attacker with non-privileged access can change the device’s global brightness, leading to undesired system behavior. The vulnerability is categorized as Moderate in Qualcomm/Pixel entries, and public documentation indicates exposure i...
CVE-2023-21641 Permissions, Privileges, and Access Controls in Display
An app with non-privileged access can change global system brightness and cause undesired system behavior...
PT-2023-18305 · Qualcomm · Snapdragon +15
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: An app with non-privileged access can change global system brightness and cause undesired system behavior. Recommendations: At the moment, there is no information about a newer...
PT-2023-4128 · Abb · Abb Ability Zenon
Name of the Vulnerable Software and Affected Versions: ABB Ability zenon versions 11 build through 11 build 106404 Description: A vulnerability exists in the zenon system, allowing low-privileged users to read and update data in various directories. This issue can be exploited by attackers using...
CVE-2023-35827
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravbremove in drivers/net/ethernet/renesas/ravbmain.c...
CVE-2023-34341
AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering...