PT-2023-19359 · Wpazure Themes · Wpazure Themes Upfrontwp

Name of the Vulnerable Software and Affected Versions: Wpazure Themes Upfrontwp theme versions = 1.1 Description: The issue is related to an Authenticated Reflected Cross-site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into the website, whi...

SecurityCouncilMemberElectionGovernor propose() function is not properly restricted

Lines of code Vulnerability details summary The propose function in the SecurityCouncilMemberElectionGovernor contract is not properly restricted. This means that any user can call it, including attackers. Description The propose function in the SecurityCouncilMemberElectionGovernor contract is...

CVE-2023-24471

An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normal...

Privilege Escalation

sentry is vulnerable to Privilege Escalation. An authenticated attacker is able to take advantage of an access token with a restricted scope by requesting a list of all user-created tokens, including those with wider scopes from the /api/0/api-tokens/ endpoint, resulting in privilege escalation...

CVE-2023-37486

Under certain conditions SAP Commerce OCC API - versions HYCOM 2105, HYCOM 2205, COMCLOUD 2211, endpoints allow an attacker to access information which would otherwise be restricted. On successful exploitation there could be a high impact on confidentiality with no impact on integrity and...

CVE-2023-37486

Under certain conditions SAP Commerce OCC API - versions HYCOM 2105, HYCOM 2205, COMCLOUD 2211, endpoints allow an attacker to access information which would otherwise be restricted. On successful exploitation there could be a high impact on confidentiality with no impact on integrity and...

PT-2023-4690 · Unknown · Sicam Toolbox Ii

Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.10 Description: A vulnerability has been identified in the SICAM TOOLBOX II application, where the database service is executed as NT AUTHORITYSYSTEM. This could allow a local attacker to execute operati...

Information Disclosure

gitlab is vulnerable to Information Disclosure. An attacker can read environment names supposed to be restricted to project memebers only...

The vulnerability of the UploadProgress.ashx component of the system for working with open source Onlyoffice Community Server allows a hacker to execute arbitrary code.

The vulnerability of the UploadProgress.ashx component of the Onlyoffice Community Server system is related to errors in processing the relative path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

User Access Manager < 2.2.18 - IP Spoofing

Description The plugin prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible for attackers to access restricted content in certain situations. PoC Set HTTPXREALIP which is used in checkUserGroupAccess to use an IP from the allowlist...

Mitsubishi Electric GOT2000 and GOT SIMPLE

1. EXECUTIVE SUMMARY ​CVSS v3 5.9 ​ATTENTION: Exploitable remotely ​Vendor: Mitsubishi Electric ​Equipment: GOT2000 Series and GOT SIMPLE Series ​Vulnerability: Predictable Exact Value from Previous Values 2. RISK EVALUATION ​Successful exploitation of this vulnerability could allow an attacker...

Path Traversal

@simonsmith/cypress-image-snapshot is vulnerable to Path Traversal. The vulnerability exists because the library does not properly sanitize snapshot filenames, allowing an attacker to create directories or images outside the restricted directory...

The vulnerability of the NodeBB Forum software lies in the incorrect path name limitation for accessing the restricted directory. This allows a violator to execute arbitrary code.

The vulnerability of the NodeBB Forum software exists due to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the SAP NetWeaver software integration platform lies in the incorrect limitation of the path name to the restricted access catalog, which allows a hacker to re-record arbitrary files.

The vulnerability of the SAP NetWeaver software integration platform is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to re-record arbitrary files remotely...

The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, arises from an incorrect limitation on the path to the restricted directory. This allows a malicious individual to disclose confidential information.

The vulnerability of the command-line utility for converting HTML files into PDF format, wkhtmltopdf, is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to disclose confidential information remotely...

CVE-2023-26438

External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use TOCTOU weakness, involving the JDK DNS cache. Attackers that were timing DNS cache expiry correctly were able to inject configuration that would bypass existing network deny-lists. Attackers could...

CVE-2023-1210

Removed by vendor...

CVE-2023-31425

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with Fabric OS v9.1.0, “root” account access is...

ASB-A-236688380

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-38306

An issue was discovered in Webmin 2.021. A Cross-site Scripting XSS Bypass vulnerability was discovered in the file upload functionality. Normally, the application restricts the upload of certain file types such as .svg, .php, etc., and displays an error message if a prohibited file type is...