PT-2024-37237 · Palo Alto Networks · Palo Alto Networks Prisma Cloud Compute

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Prisma Cloud Compute affected versions not specified Description: A cross-site scripting XSS issue allows a malicious administrator with add/edit permissions for identity providers to store a JavaScript payload using the we...

PT-2024-5657

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Panorama affected versions not specified Description The issue is related to an arbitrary file upload vulnerability, allowing an authenticated read-write administrator with access to the web interface to disrupt system...

Schneider Electric SAGE RTUs Security Vulnerability

Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A security vulnerability exists in the Schneider Electric SAGE RTUs that stems from the presence of incorrect default permissions that allow authenticated user...

Schneider Electric SAGE RTUs Path Traversal Vulnerability

The Schneider Electric SAGE RTUs is a high-performance device for industrial automation and remote monitoring from Schneider Electric France. A path traversal vulnerability exists in the Schneider Electric SAGE RTUs, which originates from allowing an authenticated user to access the device's web...

Palo Alto Networks Prisma Cloud Cross-Site Scripting Vulnerability

Palo Alto Networks Prisma Cloud is a comprehensive cloud-native security platform from Palo Alto Networks, Inc. It provides cloud security services. A cross-site scripting vulnerability exists in Palo Alto Networks Prisma Cloud Compute, which originates from a vulnerability that allows a maliciou...

cockpit: command injection when deleting a sosreport with a crafted name

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer...

CVE-2024-35207

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The web interface of the affected devices are vulnerable to Cross-Site Request ForgeryCSRF attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform...

CVE-2024-35207

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The web interface of the affected devices are vulnerable to Cross-Site Request ForgeryCSRF attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform...

CVE-2024-35207

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The web interface of the affected devices are vulnerable to Cross-Site Request ForgeryCSRF attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform...

CVE-2024-35207

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The web interface of the affected devices are vulnerable to Cross-Site Request ForgeryCSRF attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform...

PT-2024-4204 · Schneider Electric · Schneider Electric Sage

Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage versions affected versions not specified Description: The issue is related to a buffer copy without checking the size of input data in the web interface of the Schneider Electric Sage software. This could allow a remot...

PT-2024-4578 · Unknown · Sinec Traffic Analyzer

Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V1.2 Description: A vulnerability has been identified in the web interface of the affected devices, making them susceptible to Cross-Site Request Forgery CSRF attacks. By tricking an authenticated vict...

PT-2024-4203 · Schneider Electric · Schneider Electric Sage

Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage affected versions not specified Description: The issue is related to an out-of-bounds read vulnerability in the web interface of the Schneider Electric Sage software for remote lighting and energy management devices...

PT-2024-4181 · Schneider Electric · Schneider Electric Sage

Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage versions affected versions not specified Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow a remote...

CVE-2024-29849: Veeam discloses Critical Vulnerability that allows attackers to bypass user authentication on its Backup Enterprise Manager web interface

On May 21, 2024, Veeam revealed a severe flaw across its Veeam Backup Enterprise Manager VBEM web interface that enables an unauthenticated attacker to log into the web interface as any user. Officially designated as CVE-2024-29849, the vulnerability presents a major threat with a CVSS V3 rating ...

The vulnerability of the web interface of the microprogramming software for routers Maipu MP1800X-50 allows a hacker to obtain confidential information.

The vulnerability of the web interface of the microprogrammed software router Maipu MP1800X-50 is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information...

Exploit for Cross-site Scripting in Cisco Finesse

Description A vulnerability in the web-based management inte...

Exploit for Server-Side Request Forgery in Cisco Finesse

Description A vulnerability in the web-based management inte...

Fedora: Security Advisory (FEDORA-2024-b8e474fbd3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-80aa2e0e55)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...