CVE-2024-4654: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/cloudInterface.php. The manipulation of the argument INSTICODE leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-4257: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack...

CVE-2023-6523

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...

CVE-2023-6523

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...

CVE-2023-6522

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

CVE-2023-6522

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

CVE-2023-6523

CVE-2023-6523 corresponds to an Authorization Bypass Through User-Controlled Key in ExtremePacs Extreme XDS, enabling Authentication Abuse in affected versions before 3914. The connected sources specify Extreme XDS prior to 3914 as vulnerable; remediation guidance from PT-2024-14991 recommends up...

CVE-2023-6523 IDOR in ExtremePacs's Extreme XDS

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...

CVE-2023-6523 IDOR in ExtremePacs's Extreme XDS

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...

CVE-2023-6522

CVE-2023-6522 affects Extreme XDS (ExtremePacs) with an incorrect use of privileged APIs that allows collection of data as provided by users. Affected software is Extreme XDS prior to version 3914. The vulnerability stems from improper privilege management, enabling data collection by users throu...

CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

ExtremePacs Extreme XDS 安全漏洞

ExtremePacs Extreme XDS is a service. A security vulnerability exists in ExtremePacs Extreme XDS versions prior to 3914, which stems from a vulnerability that allows authorization authentication to be bypassed...

CVE-2023-6522: Incorrect Use of Privileged APIs

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

PT-2024-14990 · Extreme Networks · Extreme Xds

Name of the Vulnerable Software and Affected Versions: Extreme XDS versions before 3914 Description: The issue affects ExtremePacs Extreme XDS, allowing collection of data as provided by users due to improper privilege management. Recommendations: For versions before 3914, update to version 3914 ...

PT-2024-14991 · Extreme Networks · Extreme Xds

Name of the Vulnerable Software and Affected Versions: Extreme XDS versions prior to 3914 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS, allowing Authentication Abuse. Recommendations: For versions prior to 3914,...

ExtremePacs Extreme XDS 安全漏洞

ExtremePacs Extreme XDS is a service. A security vulnerability exists in ExtremePacs Extreme XDS versions prior to 3914 that stems from improper privilege management...

CVE-2023-6523: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...

Fedora 39 : golang-github-cncf-xds / golang-github-envoyproxy-control-plane / etc (2023-6b89bc0305)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-6b89bc0305 advisory. Contains updates to address CVE-2022-28357,41717 and also NATS: 2023-01 nats-server: Adding accounts for just the system account adds auth bypass Tenable has...

Fedora: Security Advisory for golang-github-cncf-xds (FEDORA-2023-6b89bc0305)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...