21100 matches found
Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2160197)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to execute code in the context of LOCAL SERVICE...
Jamf Pro Security Vulnerability
Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro Server versions prior to 10.46.1, which stems from an access control corruption during the authentication process...
CVE-2023-31224
Jamf Pro Server before 10.46.1 has a broken access control issue in authentication. Affected product: Jamf Pro Server (pre-10.46.1). Root cause: improper access control during the authentication process. Impact: high confidentiality, integrity, and availability per CVE-2023-31224. Remediation: up...
CVE-2023-31224
There is broken access control during authentication in Jamf Pro Server before 10.46.1...
Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2160098)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by failing to properly validate a user-supplied string before executing a system call with it. An...
Voltronic Power ViewPower Authentication Bypass Vulnerability
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. An authentication bypass vulnerability exists in Voltronic Power ViewPower Pro, which can be exploited by an attacker to bypass authentication on the system...
Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159801)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by a lack of proper validation of user-supplied data. An attacker can exploit the vulnerability to...
PT-2023-23245 · Jamf · Jamf Pro Server
Name of the Vulnerable Software and Affected Versions: Jamf Pro Server versions prior to 10.46.1 Description: The issue is related to broken access control during authentication. Recommendations: For Jamf Pro Server versions prior to 10.46.1, update to version 10.46.1 or later to resolve the issu...
Voltronic Power ViewPower SQL Injection Vulnerability
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from a SQL injection vulnerability that is caused by failing to properly validate a user-supplied string before constructing a SQL query using it. An attack...
Voltronic Power ViewPower SQL Injection Vulnerability (CNVD-2025-2160296)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from a SQL injection vulnerability that is caused by failing to properly validate a user-supplied string before constructing a SQL query using it. An attack...
pro-xperts.de Improper Access Control vulnerability OBB-3820174
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pro-stadthalle-meinerzhagen.de Improper Access Control vulnerability OBB-3820172
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11479)
Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. An attacker with network access to affected products could cause a denial of service condition because of a vulnerability in the TCP retransmission queue implementation kernel when handling TCP...
Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11478)
Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. A remote attacker could cause a denial of service condition by sending specially crafted TCP Selective Acknowledgment SACK sequences to affected products. This plugin only works with Tenable.ot...
pro-animations.com Cross Site Scripting vulnerability OBB-3819601
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-32795 · WordPress · Paid Memberships Pro
Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress versions up to 2.12.5 Description: The issue arises from an incorrectly implemented capability check in the pmpro rest api get permission...
WordPress Paid Memberships Pro Plugin <= 2.12.5 is vulnerable to Broken Access Control
Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.5 Fixed in 2.12.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-6855 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fb6688b14c42 Credits Webbernaut Required...
CVE-2023-47507
Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro: from n/a through 3.6.5...
