16955 matches found
CGA-3CJR-985F-7R7H
Bulletin has no description...
OpenStack Neutron can use an incorrect ID during policy enforcement
In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...
CVE-2024-45755
An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...
GHSA-RQC4-2HC7-8C8V virtualenv allows command injection through activation scripts for a virtual environment
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287...
BELL-CVE-2024-53095
Bulletin has no description...
BELL-CVE-2024-53094
Bulletin has no description...
BELL-CVE-2024-53091
Bulletin has no description...
BELL-CVE-2024-53089
Bulletin has no description...
CVE-2024-51074
Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to arbitrarily change odometer readings in the vehicle by targeting the instrument cluster through the unsecured CAN network. NOTE: this is disputed by the supplier because the CAN b...
BELL-CVE-2024-8932
Bulletin has no description...
BELL-CVE-2024-11236
Bulletin has no description...
BELL-CVE-2024-11233
Bulletin has no description...
CVE-2024-8932 OOB access in ldap_escape
In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...
The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.
The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Allegra 路径遍历漏洞
Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra, which stems from the getFileContentAsString function containing a directory traversal information disclosure vulnerability...
Rockwell Automation FactoryTalk Updater Client 4.20.00 RCE
The version of Rockwell Automation FactoryTalk Updater Client installed on the remote Windows host is prior to 4.20.0. It is, therefore, affected by a remote code execution vulnerability. For more information, consult the vendor advisory. Note that Nessus has not tested for these issues but has...
BELL-CVE-2024-53088
Bulletin has no description...
BELL-CVE-2024-53082
Bulletin has no description...