78 matches found
Malicious code in xds-count (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3971 Malicious code in xds-count (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-4654
CVE-2024-4654 affects BlueNet Technology Clinical Browsing System v1.2.1. The vulnerability resides in /xds/cloudInterface.php where manipulating the INSTI_CODE parameter triggers SQL injection. Attackers may exploit remotely, and the exploit has been disclosed publicly. Several sources corrobora...
CVE-2023-6523
Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...
CVE-2023-6523
Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...
CVE-2023-6522
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...
CVE-2023-6522
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...
CVE-2023-6523 IDOR in ExtremePacs's Extreme XDS
Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...
CVE-2023-6523
CVE-2023-6523 corresponds to an Authorization Bypass Through User-Controlled Key in ExtremePacs Extreme XDS, enabling Authentication Abuse in affected versions before 3914. The connected sources specify Extreme XDS prior to 3914 as vulnerable; remediation guidance from PT-2024-14991 recommends up...
CVE-2023-6523 IDOR in ExtremePacs's Extreme XDS
Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914...
CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...
CVE-2023-6522
CVE-2023-6522 affects Extreme XDS (ExtremePacs) with an incorrect use of privileged APIs that allows collection of data as provided by users. Affected software is Extreme XDS prior to version 3914. The vulnerability stems from improper privilege management, enabling data collection by users throu...
CVE-2023-6522 Information Disclosure in ExtremePacs's Extreme XDS
Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...
ExtremePacs Extreme XDS 安全漏洞
ExtremePacs Extreme XDS is a service. A security vulnerability exists in ExtremePacs Extreme XDS versions prior to 3914, which stems from a vulnerability that allows authorization authentication to be bypassed...
PT-2024-14991 · Extreme Networks · Extreme Xds
Name of the Vulnerable Software and Affected Versions: Extreme XDS versions prior to 3914 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS, allowing Authentication Abuse. Recommendations: For versions prior to 3914,...
ExtremePacs Extreme XDS 安全漏洞
ExtremePacs Extreme XDS is a service. A security vulnerability exists in ExtremePacs Extreme XDS versions prior to 3914 that stems from improper privilege management...
PT-2024-14990 · Extreme Networks · Extreme Xds
Name of the Vulnerable Software and Affected Versions: Extreme XDS versions before 3914 Description: The issue affects ExtremePacs Extreme XDS, allowing collection of data as provided by users due to improper privilege management. Recommendations: For versions before 3914, update to version 3914 ...
Fedora 39 : golang-github-cncf-xds / golang-github-envoyproxy-control-plane / etc (2023-6b89bc0305)
The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-6b89bc0305 advisory. Contains updates to address CVE-2022-28357,41717 and also NATS: 2023-01 nats-server: Adding accounts for just the system account adds auth bypass Tenable has...
Fedora: Security Advisory for golang-github-cncf-xds (FEDORA-2023-6b89bc0305)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
