SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP, which can be exploited by an attacker with administrative or user directory privileges to disclose data and compromise program...

CVE-2024-43176

IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privileged users...

CVE-2024-53706

A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to root and potentially lead to code execution...

CVE-2024-45387

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

CVE-2024-12728

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 20.0.3...

CVE-2024-12728

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 20.0.3...

CVE-2024-12728

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 20.0.3...

CVE-2024-12728

A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 20.0.3...

CVE-2024-12111

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.34.4; 24.34.5...

CVE-2024-12111 Potential LDAP injection vulnerability in OpenText Privileged Access Manager

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.34.4; 24.34.5...

CVE-2024-12111

CVE-2024-12111 describes an LDAP injection vulnerability in OpenText Privileged Access Manager that can lead to authentication bypass. Affected products: OpenText Privileged Access Manager; affected versions: 23.3(4.4) and 24.3(4.5). Root cause: LDAP authentication path injection; impact: authent...

CVE-2024-12111 Potential LDAP injection vulnerability in OpenText Privileged Access Manager

In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Access Manager that allows authentication bypass. This issue affects Privileged Access Manager version 23.34.4; 24.34.5...

Improper Authorization

apachesuperset is vulnerable to Improper Authorization. The vulnerability is due to the FABADDSECURITYAPI being enabled, allows lower-privileged users to access and use an API that should be restricted to higher-privileged users...

Sophos Firewall 安全漏洞

Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in versions prior to Sophos Firewall 20.0 MR3 20.0.3. An attacker exploiting this vulnerability could access the firewall as a privileged system via SSH...

OpenText Privileged Access Manager 安全漏洞

OpenText Privileged Access Manager is a privileged access management software from OpenText Canada. A security vulnerability exists in OpenText Privileged Access Manager versions 23.3 4.4 and 24.3 4.5. An attacker could bypass authentication by exploiting the vulnerability...

PT-2024-17446 · Opentext · Opentext Privileged Access Manager

Name of the Vulnerable Software and Affected Versions: OpenText Privileged Access Manager versions 23.34.4 through 24.34.5 Description: In a specific scenario, a LDAP user can abuse the authentication process in OpenText Privileged Access Manager, allowing authentication bypass. Recommendations:...

PT-2024-9753

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to 20.0 MR3 20.0.3 Description A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall. This issue could let an attacker gain unauthorized access to protected...

PT-2024-32410 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.4 and 7.5 Description: The issue allows an authenticated user to gain elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object...

CVE-2024-46971

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

CVE-2024-47892 GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...