16726 matches found
Ivanti Addresses Critical Vulnerability in Endpoint Manager
Summary: Ivanti addressed a critical vulnerability CVE-2023-39336 in its Endpoint Management software, ensuring secure usage for its 40,000 worldwide customers. The flaw, resolved in version 2022 Service Update 5, posed a risk of pre-authenticated sql injection and possibly Remote Code Injection ...
CVE-2023-50948
IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...
changeRegistries() from the Tokenomics contract changes different registries at the same time.
Lines of code Vulnerability details Impact In a case where either one of the agent, component or service registry are deprecated, attempting to replace the compromised registry necessitates an overall replacement of all the other registries. This not only utilizes excess gas but can also bring...
PT-2024-15424 · Sourcecodester · Sourcecodester Clinic Queuing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Clinic Queuing System version 1.0 Description: A critical issue has been found in the SourceCodester Clinic Queuing System, affecting the /LoginRegistration.php file. The manipulation of the formToken argument leads to...
Default credentials
When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming th...
Cisco NX-OS Software VXLAN OAM Denial of Service (CVE-2021-1587)
A vulnerability in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of specific...
Algorithmic Complexity
Overview PeterO.Cbor is a C implementation of Concise Binary Object Representation CBOR. Affected versions of this package are vulnerable to Algorithmic Complexity due to use of an inefficient algorithm in the DecodeFromBytes or other decoding mechanisms. An attacker can cause a denial of service...
Race condition
PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of service vulnerability. An attacker may trigger the denial of service condition by providing crafted data to the DecodeFromBytes or other decoding mechanisms in PeterO.Cbor. Depending on the usage of the library, an...
GitLab 10.7 < 15.1.5 / 15.2 < 15.2.3 / 15.3 < 15.3.1 (CVE-2022-2908)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1...
VulnCheck KEV: CVE-2017-10974
Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on thi...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
Exploit CVE-2023-22515 A simple basch script exploit for CV...
PT-2024-18984 · Rubygems · Omniauth-Microsoft Graph
Name of the Vulnerable Software and Affected Versions: omniauth-microsoft graph versions prior to 2.0.0 Description: The implementation did not validate the legitimacy of the email attribute of the user nor did it give or document an option to do so, making it susceptible to nOAuth misconfigurati...
CVE-2023-51663
Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...
Exploit for Server-Side Request Forgery in Apache Ofbiz
CVE-2023-51467 Scanner 🕵️♂️ Description 📜 CVE-2023-51467...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Confluence Pre-Auth Remote Code Execution via OGNL Injection...
PT-2024-14596
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition in the Linux kernel's sparse memory management can cause a kernel crash when accessing memory section-usage. This issue occurs when the system memory configuration has...
Incorrect license usage shown in Endpoint Management
In-use license counts in the Endpoint Management console do not match the actual number of licenses being utilized...
Exploit for Code Injection in Craftcms Craft_Cms
Craft CMS CVE-2023-41892 There is a Unauthenticated Remote...