GHSA-CMF4-H3XC-JW8W Grafana Cross Site Request Forgery (CSRF)

Today we are releasing Grafana 8.3.5 and 7.5.15. This patch release includes MEDIUM severity security fix for Cross Site Request Forgery for Grafana. Release v.8.3.5, only containing security fixes: - Download Grafana 8.3.5 - Release notes Release v.7.5.15, only containing security fixes: -...

ROS-20240201-01

Vulnerability of XTerm terminal emulator is related to failure to clean input data. Exploitation exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data, compromise its integrity, and cause denial of service Vulnerability in the ReGIS vector graphics...

CVE-2024-0832

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

Privilege escalation

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

CVE-2024-0832 Privilege Elevation via Telerik Reporting Installer

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

CVE-2024-0832

Technical details about CVE-2024-0832 are not publicly provided in the supplied documents. No concrete exploit information or affected versions are specified here. Monitor for updates from official advisories and connected sources.

CVE-2024-0832 Privilege Elevation via Telerik Reporting Installer

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

masterq.com.au Cross Site Scripting vulnerability OBB-3846497

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-0832: Improper Privilege Management

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

Telerik Reporting Security Breach

Telerik Reporting is a .NET/.NET Framework embedded reporting tool from Telerik Bulgaria. A security vulnerability exists in Telerik Reporting prior to version 2024 R1, which stems from an elevation of privilege vulnerability that allows a less privileged user to elevate their privileges on the...

annualmeeting.chickasaw.net Cross Site Scripting vulnerability OBB-3846459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

publicart.ie Cross Site Scripting vulnerability OBB-3846391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

go4venture.com Cross Site Scripting vulnerability OBB-3846205

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Advisory ROSA-SA-2024-2335

software: xterm 386 WASP: ROSA-CHROME packageevrstring: xterm-386-1.src.rpm CVE-ID: CVE-2023-40359 BDU-ID: 2023-07914 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the ReGIS Vector Graphics Reporting ReGIS Reporting feature of the XTerm terminal emulator is related to an operation exceeding...

Veeam ONE Web Client Page Fails to Load After Updating .NET Runtime Components

Veeam ONE 12.2 and 12.3 .NET Version Requirements Veeam ONE build 12.2 build 12.2.0.4093 and 12.3 build 12.3.0.4670 require and support only .NET 8.0. Note: All three component versions must match. ASP.NET Core Runtime 8.0.x Microsoft ASP.NET Core 8.0.x - Shared Framework x64 .NET Desktop Runtime...

Cross Site Scripting (XSS)

Orthanc is vulnerable to Cross Site Scripting XSS. The vulnerability is caused due to a missing sanitization in the server's error reporting. This can lead to compromising Confidentiality and Integrity of the system...

mangl.at Cross Site Scripting vulnerability OBB-3845856

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hoteledvards.lv Improper Access Control vulnerability OBB-3845334

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

daugavkrasti.lv Improper Access Control vulnerability OBB-3845244

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

seaitaly.it Improper Access Control vulnerability OBB-3844140

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...