Vulnerabilidades

Una vulnerabilidad ha sido identificada en SINEMA Remote Connect Server (Todas las versiones < V3.2 SP4). Las aplicaciones afectadas no validan correctamente las restricciones de licencia contra la base de datos, permitiendo la modificación directa de la tabla system_ticketinfo para eludir las limitaciones de licencia…

Una vulnerabilidad ha sido identificada en SINEMA Remote Connect Server (Todas las versiones < V3.2 SP4). Las aplicaciones afectadas contienen claves privadas SSL/TLS en el servidor que no están protegidas adecuadamente, permitiendo a cualquier usuario con acceso al servidor leer estas claves. Esto podría permitir a…

Una vulnerabilidad ha sido identificada en Gridscale X Prepay (Todas las versiones < V4.2.1). La aplicación afectada es vulnerable a la captura-repetición de tokens de autenticación. Esto podría permitir a un usuario autenticado pero ya bloqueado establecer sesiones de usuario aún válidas.

Una vulnerabilidad ha sido identificada en Gridscale X Prepay (Todas las versiones < V4.2.1). La aplicación afectada es vulnerable a la enumeración de usuarios debido a respuestas distinguibles. Esto podría permitir a un atacante remoto no autenticado determinar si un usuario es válido o no, lo que facilita un ataque…

Se ha identificado una vulnerabilidad en COMOS V10.6 (Todas las versiones menor que la versión V10.6.1), COMOS V10.6 (Todas las versiones menor que la versión V10.6.1), JT Bi-Directional Translator for STEP (Todas las versiones), NX V2412 (Todas las versiones menor que la versión V2412.8900 con Cloud Entitlement…

Se ha identificado una vulnerabilidad en COMOS V10.6 (Todas las versiones menor que la versión V10.6.1), COMOS V10.6 (Todas las versiones menor que la versión V10.6.1), NX V2412 (Todas las versiones menor que la versión V2412.8700), NX V2506 (Todas las versiones menor que la versión V2506.6000), Simcenter 3D (Todas…

Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application.

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system.

Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted service path vulnerability by specifying a malicious service name in the 'sc qc'…

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows…

The Nexter Extension – Site Enhancements Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nxt-year' shortcode in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow,…

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.

MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint (/MILLENSYS/settings) that is accessible without authentication. This page leaks plaintext database credentials, file share paths, internal license server configuration, and software update parameters. An unauthenticated attacker…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a through <= 4.8.

Vulnerabilidad de redirección de URL a sitio no confiable ('Redirección abierta') en Frank Goossens WP YouTube Lyte wp-youtube-lyte permite phishing. Este problema afecta a WP YouTube Lyte: desde n/a hasta menor o igual que 1.7.28.

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an authenticated SQL Injection vulnerability in the API allows any user, regardless of permission level, to execute arbitrary SQL queries. By manipulating the display parameter in an API request, an…

The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-side validation. When an authenticated user omits or leaves the `password` and `repeat_password` parameters empty in the password change request, the backend still returns…

Confusión de tipos en V8 en Google Chrome Versiones anteriores a 142.0.7444.175 permitió a un atacante remoto potencialmente exploitar la corrupción de la pila a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: Alta)

A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This…