519 matches found
CVE-2021-43471
CVE-2021-43471 Denial of service vulnerability caused by unauthorized access to Canon printers Affect product: LBP223 Time: 2021.11.3 The System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a...
CVE-2026-16306: INFINITT Healthcare System Manager: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd
Remote Code Execution in the IModular.exe URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted imodular:// URI containing attacker-controlled command...
INFINITT PACS System Manager contains multiple code execution vulnerabilities
Overview INFINITT PACS installations using System Manager versions 3.0.11.3 and 3.0.11.5 contain vulnerabilities that may allow an attacker to execute arbitrary code. INFINITT Healthcare has remediated the issues in System Manager versions 3.0.12.3 and 3.0.12.5. Description INFINITT PACS is an...
CVE-2026-16305: INFINITT Healthcare System Manager: Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd
Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable execlist.txt command manifest that is processed...
CVE-2026-117466
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator...
CVE-2026-117466
In affected versions of Octopus Server , a user with the System Manager role can perform a privilege escalation to gain full system Administrator permissions. This vulnerability is associated with CWE-269 (Improper Privilege Management). No specific root cause, affected versions, or remediation s...
EUVD-2026-110724
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator...
CVE-2026-117466
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator...
PT-2026-126355
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator...
Octopus Deploy Octopus Server permission and access control issue vulnerability
In Octopus Deploy Octopus Server versions from 2019.0.0 up to and including 2026.2.13469, as well as from 2026.3.0 up to and including 2026.3.15863, there is a vulnerability related to permission escalation and access control. This vulnerability stems from improper permission management; users wi...
Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities
Summary Multiple vulnerabilities were found in IBM Db2 LUW that affect Platform System Manager PSM and Db2 pattern Type pType shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System CPS 2.3.6.2. Vulnerability Details CVEID:CVE-2025-36122 DESCRIPTION: IBM Db...
danfoss-ak-sm-decoy
coldstore — a refrigeration system-manager decoy A second lur...
EUVD-2024-55785
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...
CVE-2024-58390
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...
CVE-2024-58390
The Frappe application, versions before 14.81.4 and 15.x before 15.41.0 , is vulnerable to an improper privilege management issue (CWE-269). A specific document action allows authenticated attackers with Website User access to perform additional steps to escalate their privileges to System Manage...
CVE-2024-58390 Frappe before 15.41.0 Privilege Escalation via Document Action
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...
CVE-2024-58390 Frappe before 15.41.0 Privilege Escalation via Document Action
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...
CVE-2024-58390 Frappe before 15.41.0 Privilege Escalation via Document Action
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...
PT-2026-111002
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...
CVE-2024-58390: Improper Privilege Management
Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with...