CVE-2024-36455

Broadcom Symantec Privileged Access Management is affected by CVE-2024-36455 through an input validation error that allows an unauthenticated attacker to achieve remote command execution by sending a specially crafted HTTP request. The exposed component is PAM, and the root cause is improper inpu...

CVE-2024-36455 Symantec Privileged Access Manager Remote Command Execution vulnerability

An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request...

Mirth Connect XStreamSerializer Arbitrary Command Execution

The vulnerability of the XStreamSerializer class in the Mirth Connect healthcare management optimization tool is related to the lack of data cleansing measures at the administrative level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

PT-2024-27010

Name of the Vulnerable Software and Affected Versions PAM system affected versions not specified Description The issue allows an unauthenticated attacker to achieve remote command execution on the affected PAM system. This is done by uploading a specially crafted PAM upgrade file. Recommendations...

Cellopoint Secure Email Gateway Security Vulnerability

Cellopoint Secure Email Gateway Cellopoint SEG is a secure email gateway from Cellopoint China. A security vulnerability exists in Cellopoint Secure Email Gateway versions prior to 4.5.0, which originates from failure to properly validate user input, resulting in a buffer overflow vulnerability...

PT-2024-27009 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM system affected versions not specified Description: An improper input validation in the PAM system allows an unauthenticated attacker to achieve remote command execution by sending a specially crafted HTTP request. Recommendations: At the...

CVE-2024-38492: Improper Neutralization of Special Elements used in a Command

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

PT-2024-28032 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM system affected versions not specified Description: The issue allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file. Recommendations: At the...

Broadcom Symantec Privileged Access Management security vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

PT-2024-37840 · Cellopoint · Cellopoint Secure Email Gateway

Name of the Vulnerable Software and Affected Versions: Cellopoint Secure Email Gateway affected versions not specified Description: The issue arises from the SMTP Listener of the Secure Email Gateway not properly validating user input, leading to a buffer overflow. This allows an unauthenticated...

Broadcom Symantec Privileged Access Management security vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

PT-2024-28034 · Pam · Pam

Name of the Vulnerable Software and Affected Versions: PAM affected versions not specified Description: The issue allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request. Recommendations: At the...

CVE-2024-36456: Improper Control of Generation of Code

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

CVE-2024-36455: Improper Initialization

An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request...

CVE-2024-38494: Inconsistent Interpretation of HTTP Requests

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request...

CVE-2024-40552

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution RCE vulnerability via the cmdarray parameter at /site/ScriptComponent.java...

PublicCMS Security Vulnerabilities

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS version v4.0.202302.e, which stems from the presence of remote command execution...

SeaCMS security vulnerabilities

SeaCMS is an open source content management system based on PHP+MySql technology. An input validation vulnerability exists in the SeaCMS adminconfigmark.php processing parameter, which can be exploited by a validated remote attacker to submit a special request and execute arbitrary commands in th...

PT-2024-28917

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.202302.e Description A remote command execution issue was discovered, allowing attackers to execute commands via the cmdarray parameter at the /site/ScriptComponent.java endpoint. Recommendations For PublicCMS version...

CVE-2024-40552

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution RCE vulnerability via the cmdarray parameter at /site/ScriptComponent.java...