2869 matches found
Conduit Security Vulnerabilities
Conduit is a simple, fast and reliable chat server from the individual developer Timo Kösters. A security vulnerability exists in Conduit v0.7.0 and earlier versions, which stems from a lack of authorization in the API, allowing elevation of privileges and running commands to reset passwords...
CVE-2024-3264
CVE-2024-3264 concerns Mia Technology’s Mia-Med Health Application. Multiple connected sources describe a vulnerability arising from the use of a broken or risky cryptographic algorithm that enables signature spoofing due to improper validation/authentication. The affected product is reported as ...
PT-2024-27768 · Envisionware · Envisionware Computer Access & Reservation Control Selfcheck +1
Name of the Vulnerable Software and Affected Versions: EnvisionWare Computer Access & Reservation Control SelfCheck version 1.0 Description: The issue allows unauthenticated attackers on the same network to perform a directory traversal. Recommendations: For EnvisionWare Computer Access &...
CVE-2024-35781
CVE-2024-35781 is a Word Balloon WordPress plugin vulnerability (authenticated) that allows PHP Local File Inclusion due to improper pathname limitation. Affected: Word Balloon up to and including version 4.21.1. Root cause: path traversal restricting access to restricted directories is insuffici...
CGA-R238-8H2V-2G64
Bulletin has no description...
SPA-Cart Security Breach
SPA-Cart is a shopping cart software from SPA-Cart, Inc. A security vulnerability exists in SPA-Cart version 1.9.0.6, which stems from the fact that incorrect manipulation of the parameter quantity can lead to the enforcement of a behavioral workflow...
PT-2024-28021 · Shenzhen Guoxin · Shenzhen Guoxin Synthesis Image System
Name of the Vulnerable Software and Affected Versions: Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 Description: The issue allows unauthorized user information retrieval. This is achieved via the "queryUser API" endpoint. Recommendations: For versions prior to 8.3.0, update to...
CGA-2WHJ-V58W-P3CW
Bulletin has no description...
Microsoft Windows Start Menu Software Version Enumeration
Binary data wmienumstartmenusoftwareversions.nbin...
PT-2024-22652 · Dell · Dell Scg
Name of the Vulnerable Software and Affected Versions: Dell SCG versions prior to 5.24.00.00 Description: The issue is related to an Improper Access Control vulnerability in the SCG exposed for an internal update REST API. This API is only accessible if enabled by an Admin user from the UI. A...
CGA-94C7-P83M-53Q8
Bulletin has no description...
CGA-PV77-X73C-48XX
Bulletin has no description...
CGA-F64C-VHFV-56VR
Bulletin has no description...
CGA-WP57-Q33Q-X5X7
Bulletin has no description...
CGA-V325-WV3H-279C
Bulletin has no description...
CGA-QHXV-H28X-32W2
Bulletin has no description...
CGA-P39V-9XG6-7CX2
Bulletin has no description...
CGA-JW56-V3WG-772V
Bulletin has no description...