2910 matches found
CVE-2024-50489 WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through = 1.0.45...
CVE-2024-50489
CVE-2024-50489 concerns the WordPress Realty Workstation plugin (versions
PT-2024-34266 · Unknown · Realty Workstation
Name of the Vulnerable Software and Affected Versions: Realty Workstation versions 1.0.0 through 1.0.45 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation, allowing unauthorized access. Recommendations: For versions...
WordPress plugin Realty Workstation 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability
Account Takeover vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Realty Workstation versions = 1.0.45...
WordPress Realty Workstation Plugin <= 1.0.45 is vulnerable to Broken Authentication
Software Realty Workstation Type Plugin Vulnerable versions = 1.0.45 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-50489 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 8f086511377f Credits...
CVE-2024-9002
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...
CVE-2024-9002
The CVE-2024-9002 entry concerns Schneider Electric Easergy Studio, an ICS/configuration tool. The vulnerability is described as CWE-269: Improper Privilege Management, where a non-admin authenticated user could escalate privileges by tampering with binaries, risking unauthorized access and impac...
CVE-2024-9002
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...
SUSE: Security Advisory (SUSE-SU-2024:3526-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : GNOME Shell vulnerabilities (USN-7052-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7052-1 advisory. It was discovered that GNOME Shell mishandled extensions that fail to reload, possibly leading to extensions staying enabled on the lock screen. An...
Rockwell Automation AADvance Trusted SIS Workstation
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: AADvance Trusted SIS Workstation Vulnerabilities: Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker executing...
CVE-2024-8306
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...
CVE-2024-8306
CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...
Dell Precision Rack BIOS 输入验证错误漏洞
Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. The Dell Precision Rack BIOS is vulnerable to an input validation error vulnerability that originates from incorrect input validation. Exploitation of this vulnerability by a highly privileged...
VMware Workstation 17.0.x < 17.5.1 Multiple Vulnerabilities (VMSA-2024-0011)
The version of VMware Workstation installed on the remote host is 17.0.x prior to 17.5.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
U.S. Dept Of Defense: DoD workstation exposed to internet via TinyPilot KVM with no authentication
The DoD workstation was exposed to the internet via a TinyPilot KVM device without any authentication. The TinyPilot KVM device was connected to the workstation and allowed remote access to the system over the internet...
SUSE: Security Advisory (SUSE-SU-2024:2589-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the Workstation Service in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Workstation Service in Windows operating systems is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain increased privileges...
