An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated us...
IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
AFFECTED_PRODUCTS:
IBM Jazz Foundation
IBM Jazz Foundation 7.0.2 and 7.0.3Â could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.
AFFECTED_PRODUCTS:
IBM Jazz Foundation,
IBM Jazz Foundation
Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature.
AFFECTED_PRODUCTS:
Devolutions Remote Desktop Manager
Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching.
AFFECTED_PRODUCTS:
Devolutions Remote Desktop Manager
Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.
AFFECTED_PRODUCTS:
Devolutions Remote Desktop Manager
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
AFFECTED_PRODUCTS:
Lfprojects Mlflow
There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend up...
AFFECTED_PRODUCTS:
Libjxl Project Libjxl
There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression (i.e. if using JxlEncoderAddJPEGFrame on untrusted input) does not properly check bounds in the presence of...
AFFECTED_PRODUCTS:
Libjxl Project Libjxl
Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.
Improper control of framework service permissions with possibility of some sensitive device information leakage.
A vulnerability, which was classified as critical, has been found in eNMS up to 4.2. Affected by this issue is the function multiselect_filtering of the file eNMS/controller.py of the component TGZ File Handler. The manipulation leads to path traversal. The attack may be launched remotely. The explo...
AFFECTED_PRODUCTS:
Enms Enms
A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclosed t...
AFFECTED_PRODUCTS:
Codezips E Commerce Site
IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could
lead attackers to identify and access vulnerable systems.
IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a
way that causes it to accept invalid data.
Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The
vulnerability exists due to insufficient validation of input from certain resources by the IPM software.
The attacker would need access to the local Subnet and an administrator interaction to compro...
A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service (DoS) attack due to improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without proper...
AFFECTED_PRODUCTS:
Red Hat Red Hat build of Keycloak 26.0,
Red Hat Red Hat build of Keycloak 24,
Red Hat Red Hat build of Keycloak 24.0.9
... (+1)
A vulnerability was found in welliamcao OpsManage 3.0.1/3.0.2/3.0.3/3.0.4/3.0.5. It has been rated as critical. This issue affects the function deploy_host_vars of the file /apps/api/views/deploy_api.py of the component API Endpoint. The manipulation leads to deserialization. The attack may be initi...
A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The at...
AFFECTED_PRODUCTS:
Codezips Free Exam Hall Seating Management System
A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider conf...
AFFECTED_PRODUCTS:
Red Hat Red Hat build of Keycloak 26.0,
Red Hat Red Hat build of Keycloak 24,
Red Hat Red Hat build of Keycloak 24.0.9
... (+1)
A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in enviro...
AFFECTED_PRODUCTS:
Red Hat Red Hat build of Keycloak 26.0,
Red Hat Red Hat build of Keycloak 24,
Red Hat Red Hat build of Keycloak 24.0.9
... (+1)
A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity.
AFFECTED_PRODUCTS:
Red Hat Red Hat build of Keycloak 26.0,
Red Hat Red Hat build of Keycloak 24,
Red Hat Red Hat build of Keycloak 24.0.9
... (+1)
A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't readily available to cli...
AFFECTED_PRODUCTS:
Red Hat Red Hat OpenShift Container Platform 4.16,
Red Hat Red Hat OpenShift Container Platform 4.18,
Red Hat Red Hat OpenShift Container Platform 4.17
A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file usuario.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...
AFFECTED_PRODUCTS:
Anisha Farmacia
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diag_iperf. The manipulation of the argument iperf leads to command injection. The attack may be launch...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
AFFECTED_PRODUCTS:
Wpforms Wpforms
The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.5 does not sanitise and escape some of its Images settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example...
AFFECTED_PRODUCTS:
Imagely Nextgen Gallery
A vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/network/ajax_getChannelList. The manipulation of the argument countryCode leads to command injection...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch t...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
The YaDisk Files WordPress plugin through 1.2.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
AFFECTED_PRODUCTS:
Antongorodezkiy Yadisk Files
The YaDisk Files WordPress plugin through 1.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
AFFECTED_PRODUCTS:
Antongorodezkiy Yadisk Files
A vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects some unknown processing of the file /admin/network/diag_ping6. The manipulation of the argument diag_ping6 leads to command injection. The attack may b...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
A vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vulnerability affects unknown code of the file /admin/network/diag_pinginterface. The manipulation of the argument diag_ping leads to command injection. The attack can be initiated r...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as duplicate. All references should point to CVE-2021-1904.
A vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This affects an unknown part of the file /admin/network/diag_traceroute6. The manipulation of the argument diag_traceroute6 leads to command injection. It is possible to initiate the...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/network/diag_traceroute. The manipulation of the argument diag_traceroute leads to command injection. The a...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
A vulnerability was found in the Ansible Automation Platform (AAP). This flaw allows attackers to escalate privileges by improperly leveraging read-scoped OAuth2 tokens to gain write access. This issue affects API endpoints that rely on ansible_base.oauth2_provider for OAuth2 authentication. While t...
AFFECTED_PRODUCTS:
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8,
Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9
WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\, which is mishandled by a KaTeX parser.
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/sn_package/sn_https. The manipulation of the argument https_enable leads to command injection. The...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as critical. Affected is an unknown function of the file /admin/network/wifi_schedule. The manipulation of the argument wifi_schedule_day_em_5 leads to command injection. It is possible t...
AFFECTED_PRODUCTS:
Engeniustech Enh1350ext Firmware,
Engeniustech Ens620ext Firmware,
Engeniustech Ens500 Ac Firmware
A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...
AFFECTED_PRODUCTS:
Tenda I9 Firmware
A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely...
AFFECTED_PRODUCTS:
1000Projects Beauty Parlour Management System
A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The expl...
AFFECTED_PRODUCTS:
1000Projects Beauty Parlour Management System
A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be lau...
AFFECTED_PRODUCTS:
1000Projects Beauty Parlour Management System
In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant,...
A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched remotel...
AFFECTED_PRODUCTS:
1000Projects Beauty Parlour Management System
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably positioned on the network between an E...
AFFECTED_PRODUCTS:
Echarge Salia Plcc Firmware
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.
AFFECTED_PRODUCTS:
Echarge Salia Plcc Firmware
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
AFFECTED_PRODUCTS:
Veritas Enterprise Vault
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
AFFECTED_PRODUCTS:
Veritas Enterprise Vault