Archive
23 November 2023
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
High 7.0
Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.
-
High 8.5
Arbitrary File Read As Root Via GoTTY Page
Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to escalate and read sensitive files as if they were root. This issue affects Pandora FMS: from 700 through 773.
-
High 8.2
Misassignment of privileges can cause DOS attack
Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignment could cause a DOS attack that affects the availability of the Pandora FMS server. This issue affects Pando…
-
High 8.4
Lack of Authorization and Stored XSS Via Translation Abuse
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed users with low privileges to introduce Javascript executables via a translat…
-
High 7.6
Traversal Path on PHP file
Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File Search Paths. This vulnerability allows to access the server configuration file and to compromise the database. This issue affects Pandora F…
-
High 7.6
Unauthenticated Admin Account Takeover Via XSS
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allows an attacker to perform cookie hijacking and log in as that user without the n…
-
High 7.6
Remote Code Execution via File Uploader
Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allows attackers to execute code via PHP file uploads. This issue affects Pandora FMS: from…
-
High 7.5
Path Traversal in Neutron IP Camera
Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1.
-
High 7.0
Unauthenticated Admin Account Takeover Via Cron Log File Backups
Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory for cron log backups. The contents of these log files can then be abused to authenticate to the app…
-
High 7.5
Insertion of Sensitive Information into Externally-Accessible File or Directory in BVRP Software SLmail
An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of…
-
High 8.1
An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modif…
-
High 7.3
Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious s…
-
High 7.4
There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on t…
-
High 7.3
Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious …
-
High 7.3
Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local maliciou…
-
High 7.3
Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. …