Lucene search
+L

4943 matches found

attackerkb
attackerkb
•added 2024/09/25 12:15 p.m.•11 views

CVE-2024-6592

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected...

9.3CVSS8AI score0.01168EPSS
SaveExploits0References4Affected Software2
NVD
NVD
•added 2024/09/25 12:15 p.m.•37 views

CVE-2024-6594

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

8.7CVSS0.00639EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/09/25 11:22 a.m.•49 views

CVE-2024-6594 WatchGuard Firebox Single Sign-On Client Denial-of-Service

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

8.7CVSS0.00639EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/09/25 11:22 a.m.•27 views

CVE-2024-6594 WatchGuard Firebox Single Sign-On Client Denial-of-Service

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

8.7CVSS5.3AI score0.00639EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/25 11:22 a.m.•67 views

CVE-2024-6594

CVE-2024-6594 describes an "Improper Handling of Exceptional Conditions" vulnerability in the WatchGuard Single Sign-On Client for Windows. The issue causes the client to crash while processing malformed commands, enabling a network-based attacker to trigger a denial-of-service condition for the ...

8.7CVSS5.3AI score0.00639EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/09/25 11:16 a.m.•90 views

CVE-2024-6593

CVE-2024-6593 describes an Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) for Windows, affecting versions up to 12.10.2. The underlying issue allows an attacker with network access to execute restricted management commands, indicating a privi...

9.3CVSS8.4AI score0.00584EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/09/25 11:16 a.m.•49 views

CVE-2024-6592 WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected...

9.3CVSS0.01168EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/25 11:16 a.m.•86 views

CVE-2024-6592

CVE-2024-6592 affects WatchGuard Authentication Gateway (Single Sign-On Agent) on Windows and WatchGuard SSO Client on Windows and macOS. Root cause: incorrect authorization in the protocol communication between gateway and clients, enabling authentication bypass. Affected versions: Authenticatio...

9.3CVSS8.1AI score0.01168EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2024/09/25 2:05 a.m.•60 views

CVE-2024-7491 HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.6.1 via the woofmessengerremovesubscr AJAX action due to missing validation on the 'key' user controlled key. This makes it...

5.3CVSS0.00283EPSS
SaveExploits0References2
CVE
CVE
•added 2024/09/25 2:05 a.m.•68 views

CVE-2024-7491

The CVE-2024-7491 entry concerns HUSKY – Products Filter Professional for WooCommerce for WordPress. It is an Insecure Direct Object Reference via the woof_messenger_remove_subscr AJAX action, caused by missing validation on the user-controlled key. Affected versions are up to and including 1.3.6...

5.3CVSS5.4AI score0.00283EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•2 views

CVE-2024-6592: Missing Authentication for Critical Function

An incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected...

9.3CVSS7.8AI score0.01168EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•4 views

CVE-2024-6594: Improper Handling of Exceptional Conditions

Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by...

8.7CVSS5.8AI score0.00639EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•1 views

CVE-2024-6593: Incorrect Authorization

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve...

9.3CVSS8.2AI score0.00584EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/09/25 12:00 a.m.•21 views

PT-2024-37744

Name of the Vulnerable Software and Affected Versions WatchGuard Single Sign-On Client versions through 12.7 Description The issue is related to improper handling of exceptional conditions in the WatchGuard Single Sign-On Client on Windows, causing the client to crash when handling malformed...

8.7CVSS7.1AI score0.00639EPSS
SaveExploits0References12
Microsoft KB
Microsoft KB
•added 2024/09/24 12:00 a.m.•16 views

September 24, 2024—KB5043131 (OS Build 19045.4957) Preview

None None...

6.1AI score
SaveExploits0
OSV
OSV
•added 2024/09/22 5:03 p.m.•25 views

RHSA-2020:4932 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 8

Bulletin has no description...

8.1CVSS6.1AI score0.00822EPSS
SaveExploits0References12
OSV
OSV
•added 2024/09/22 5:03 p.m.•35 views

RHSA-2020:4930 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 7

Bulletin has no description...

8.1CVSS6.1AI score0.00822EPSS
SaveExploits0References12
OSV
OSV
•added 2024/09/22 5:02 p.m.•33 views

RHSA-2020:4929 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 6

Bulletin has no description...

8.1CVSS6.1AI score0.00822EPSS
SaveExploits0References12
OSV
OSV
•added 2024/09/20 1:58 p.m.•40 views

RHSA-2021:0967 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 6

Bulletin has no description...

5.4CVSS5.4AI score0.01932EPSS
SaveExploits0References13
OSV
OSV
•added 2024/09/20 1:58 p.m.•34 views

RHSA-2021:0968 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 7

Bulletin has no description...

5.4CVSS5.4AI score0.01932EPSS
SaveExploits0References13
Rows per page
Query Builder