PT-2024-12250 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue allows a local user to obtain root access due to improper access controls. Recommendations: For versions 10.0.0.0 through 10.0.7.1, update to a versi...

IBM Security Verify Access security vulnerability

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

PT-2024-12251 · Ibm · Ibm Security Access Manager Docker

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue allows a local user to obtain root access due to improper access controls. Recommendations: For IBM Security Access Manager Docker versions 10.0.0.0...

Lumisxp Cross-Site Scripting Vulnerability

LumisXP is a cloud-based digital experience software from Lumis Inc. which helps users gain insight into various website, blog and landing page metrics on a unified platform. A security vulnerability exists in Lumisxp versions 15.0.x through 16.1.x, which stems from susceptibility to a cross-site...

PT-2024-37505 · Unknown · Lahirudanushka School Management System

Name of the Vulnerable Software and Affected Versions: lahirudanushka School Management System versions 1.0.0 through 1.0.1 Description: A critical issue was found in the Student Page component of the lahirudanushka School Management System, specifically in the file student.php. The manipulation ...

CVE-2023-38394

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

CVE-2023-47726

IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation. IBM X-Force ID: 272087...

AXIS OS Security Vulnerability

AXIS Os is an edge device operating system from Axis Sweden AXIS. A security vulnerability exists in AXIS OS versions 5.51 through 11.9, which stems from an O3C feature that could expose sensitive traffic between the client and the server...

PT-2024-5310 · Ibm · Ibm Qradar Suite +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.10.21.0 IBM Cloud Pak for Security versions 1.10.12.0 through 1.10.21.0 Description: The issue exists due to insufficient input validation, allowing a remote attacker to execute arbitrary...

Deep Java Library Security Vulnerability

Deep Java Library is an open source, high-level, engine-independent deep learning Java framework from Deep Java Library Open Source. A security vulnerability exists in Deep Java Library version 0.1.0 up to and including version 0.27.0, which stems from a vulnerability that will not prevent an...

Snipe-IT Security Breach

Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in Snipe-IT versions v4.6.17 through v6.4.1, which stems from an API call that allows users to make changes to group membership to promote or demote themselves or other users...

DNSCrypt-proxy Security Vulnerability

DNSCrypt-proxy is a DNS proxy for the DNSCrypt project. A security vulnerability exists in DNSCrypt-proxy versions v2.0.0alpha9 through v2.1.5 that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges to root by overwriting the binary...

PT-2024-27084 · Unknown · Dnscrypt-Proxy

Name of the Vulnerable Software and Affected Versions: DNSCrypt-proxy versions 2.0.0alpha9 through 2.1.5 Description: The issue is related to insecure permissions in DNSCrypt-proxy, allowing non-privileged attackers to escalate privileges to root. This can be achieved by overwriting the binary...

CVE-2023-52177

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3...

CVE-2024-31402

Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos...

@1xtr/yc-log-client (>=1.0.6, <=1.1.1), @a11ywatch/a11ywatch (>=0.2.126, <=0.3.82) +82 more potentially affected by CVE-2024-37168 via @grpc/grpc-js (>=1.10.0, <=1.10.8)

@grpc/grpc-js NPM version =1.10.0, =1.0.6, =0.2.126, =0.8.16, =0.9.58, =3.1.9, =0.78.0, =1.68.0, =8.5.1-alpha.4, =3.5.2, =17.8.3, =0.0.1-hw-fix-code-nightly-gha.29105, =0.1.5-hw-fix-code-nightly-gha.29105, =0.1.5-pd-ent-755-gha.29158 and more Source cves: CVE-2024-37168 Source advisory:...

CVE-2024-3699

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0...

Pandora Security Breach

Pandora is an analytics framework for discovering if a file is suspicious and displaying the results conveniently. A security vulnerability exists in Pandora FMS versions prior to 700 to 777 that stems from the presence of SQL injection, which results in the exploitation of the HTTP Request...

drEryk Gabinet Security breach

drEryk Gabinet is a specialized software for clinics and NFZ offices from drEryk Poland. A security vulnerability exists in drEryk Gabinet versions 7.0.0.0 through 9.17.0.0, which stems from the use of hard-coded passwords for the database, allowing an attacker to retrieve sensitive data stored i...

PT-2024-27234

Name of the Vulnerable Software and Affected Versions drEryk Gabinet versions 7.0.0.0 through 9.17.0.0 Description The issue is related to the use of a hard-coded password to access the patients' database, allowing an attacker to retrieve sensitive data. This password is uniform across all drEryk...