Archive
March 2024
Vulnerabilities first published in this month (UTC), newest first.
1,626 results · Clear filters · Feed
-
Medium 5.3
Username timing attack on recover password/MFA token in vantage6
vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. Much like GHSA-45gq-q4xh-cp53, it is possible to find which usernames exist in vantage6 by calling the …
-
Medium 4.5
IBM Integration Bus for z/OS cross-site request forgery
IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 284564.
-
Medium 6.5
Proxy-Authorization header kept across hosts in follow-redirects
follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clears authorization header during cross-domain redirect, but keep the proxy-authent…
-
Medium 6.5
Information exposure through microarchitectural state after transient execution from some register files for some Intel…
-
Medium 6.7
Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated …
-
Medium 6.7
Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authentic…
-
Medium 6.8
Uncontrolled resource consumption for some Intel(R) SPS firmware versions may allow a privileged user to potentially en…
-
Medium 6.5
Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to po…
-
Medium 6.1
Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Inte…
-
Medium 5.5
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…
-
Medium 5.3
Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow …
-
Medium 6.5
Path traversal in GoAnywhere MFT 7.4.1 and Earlier
A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web Clients.
-
Medium 5.5
A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organiz…
-
Medium 5.5
A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.
-
Medium 5.5CVE-2024-0311 Public exploit
A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.
-
Medium 6.5
WordPress Livemesh Addons for Elementor Plugin <= 8.3.5 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh Elementor Addons by Livemesh allows Stored XSS.This issue affects Elementor Addons by Livemesh: from n/a through 8.3.5.
-
Medium 4.9
An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Securi…
-
Medium 5.3
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
Medium 6.5CVE-2024-1884 EPSS 38%
Server Side Request Forgery in PaperCut NG/MF
This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.
-
Medium 6.3CVE-2024-1883 EPSS 61%
Reflected XSS in PaperCut NG/MF
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potent…
-
Medium 4.8
Improper authorization controls in PaperCut NG/MF
This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack t…
-
Medium 6.3
Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.
-
Medium 6.5
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a po…
-
Medium 6.5
Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php
-
Medium 4.3
Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unl…
-
Medium 5.9
Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrato…
-
Medium 6.7
In Delinea PAM Secret Server 11.4, it is possible for an attacker (with Administrator access to the Secret Server machi…
-
Medium 5.3
User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attac…
-
Medium 5.5CVE-2024-26475 Public exploit
An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of…
-
Medium 5.6
Cross-site websocket hijacking in Querybook
Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface. Querybook's datadocs functionality works by using a Websocket Server. The client talks to this WSS whenever updating/deleting/reading any cells as well a…
-
Medium 6.1CVE-2024-2242 Public exploit
Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting
The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to, and including, 5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…
-
Medium 6.4
WPBakery Page Builder Addons by Livemesh <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'per_line_mobile' shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping …
-
Medium 6.4
HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scrip…
-
Medium 4.7
Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The…
-
Medium 6.4
Users with `create` but not `override` privileges can perform local sync in argo-cd
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. "Local sync" is an Argo CD feature that allows developers to temporarily override an Application's manifests with locally-defined manifests. Use of the feature should generally be limit…
-
Medium 4.3
Potential log injection in reset user endpoint in ckan
A user endpoint didn't perform filtering on an incoming parameter, which was added directly to the application log. This could lead to an attacker injecting false log entries or corrupt the log file format. This has been fixed in the CKAN versions 2.9.11 and …
-
Medium 6.5
Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify
your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 allows users to create a public token in the settings, which can be used to provide guest-level access to the information of that specific user in YourSpotify. …
-
Medium 5.3
NoSQL Injection Leading to Authentication Bypass in your_spotify
your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 is vulnerable to NoSQL injection in the public access token processing logic. Attackers can fully bypass the public token authentication mechanism, regardless i…
-
Medium 5.3
Zoom Rooms Client for Windows - Race Condition
Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.
-
Medium 5.9
Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Wi…