29516 matches found
Authorization Bypass
alextselegidis/easyappointments is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access control checks on the GET, PUT, and DELETE endpoints for /services/serviceId, allowing low privileged users to fetch, modify, or delete services of any user, including admin...
Rockwell Automation FactoryTalk System Services and Policy Manager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.0 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk System Services and Policy Manager Vulnerabilities : Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...
EcoStruxure Foxboro DCS Core Control Services Buffer Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. A buffer error vulnerability exists in EcoStruxure Foxboro DCS Core Control Services 9.8 and prior versions, which stems from the presence of an...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and earlier, which stems fr...
CVE-2024-21417
Windows Text Services Framework Elevation of Privilege Vulnerability...
CVE-2024-21417
Windows Text Services Framework Elevation of Privilege Vulnerability...
The vulnerabilities of the Analyst component, Web Player, and Automation Services of the Spotfire Analyst platform, as well as the Spotfire Server and AWS Spotfire for AWS Marketplace analytical platforms, allow attackers to execute arbitrary code.
The vulnerabilities of the Analyst component, Web Player, and Automation Services of the Spotfire Analyst platform, as well as the Spotfire Server and the analytics platform based on cloud services AWS Spotfire for AWS Marketplace, are related to insufficient validation of input data. Exploiting...
CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability
...
CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability
...
CVE-2024-21417
CVE-2024-21417 is a Windows Text Services Framework elevation of privilege vulnerability. The connected records confirm the affected component as Windows Text Services Framework (with CVE-2024-21417 listed as impacting Windows CoreMessaging in one entry) and describe the impact as obtaining incre...
CVE-2024-31315
In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2024-30098
Windows Cryptographic Services Security Feature Bypass Vulnerability...
CVE-2024-30098
Windows Cryptographic Services Security Feature Bypass Vulnerability...
CVE-2024-30013
Windows MultiPoint Services Remote Code Execution Vulnerability...
CVE-2024-30013
Windows MultiPoint Services Remote Code Execution Vulnerability...
CVE-2024-30013
Technical details for CVE-2024-30013 are not provided in the supplied documents. No information about affected product/version, root cause, impact, or fixes is available here. Monitor for updates from official advisories to obtain concrete details.
CVE-2024-30013 Windows MultiPoint Services Remote Code Execution Vulnerability
...
CVE-2024-30098
CVE-2024-30098 is referenced in multiple October 2025 Windows security updates (KB5066791, KB5066835, KB5066793, KB5066780, KB5066836, etc.). The connected documents describe a cryptographic hardening change: moving RSA-based smart card certificates from Cryptographic Service Provider (CSP) to Ke...