Vulnerabilidades

The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid credentials. The root…

El Administrador RAID proporcionado por Century Corporation registra un servicio de Windows con una ruta de archivo sin comillas. Un usuario con permiso de escritura en el directorio raíz de la unidad del sistema puede ejecutar código arbitrario con privilegios del Sistema.

Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally.

LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script (for example a script element). An authenticated user…

In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they could write DLL files to directories within victims' DLL search paths.

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment.

Dell PowerProtect Data Manager, versión(es) 19.19 y 19.20, Hyper-V contiene una vulnerabilidad de almacenamiento de contraseña en texto plano. Un atacante con muchos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la divulgación de ciertas credenciales de usuario. El…

Dell PowerProtect Data Manager, Hyper-V, versiones 19.19 y 19.20, contiene una vulnerabilidad de inserción de información sensible en archivo de registro. Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso no autorizado.

Dell PowerProtect Data Manager, versiones 19.19 y 19.20, Hyper-V contiene una vulnerabilidad de Permisos Predeterminados Incorrectos. Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una Elevación de privilegios.

Dell PowerProtect Data Manager, versiones 19.19 y 19.20, Hyper-V contiene una vulnerabilidad de salto de ruta: '.../...//'. Un atacante con muchos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a un acceso al sistema de archivos para el atacante.

Dell PowerProtect Data Manager, versiones 19.19 y 19.20, Hyper-V contiene una vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando de SO ('Inyección de Comandos de SO'). Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que…

Dell PowerProtect Data Manager, versiones 19.19 y 19.20, Hyper-V, contiene una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comandos del sistema operativo'). Un atacante con muchos privilegios y acceso local podría potencialmente…

Dell PowerProtect Data Manager, Generic Application Agent, versiones 19.19 y 19.20, contiene una vulnerabilidad de permisos predeterminados incorrectos. Un atacante con pocos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, resultando en ejecución de código.

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This could result in bypassing security features within the application. Exploitation of…

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access.

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access.

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Scope is changed

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access.

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access.

Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.

Versiones 6.5.23.0 y anteriores de Adobe Experience Manager están afectadas por una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) que podría resultar en una omisión de característica de seguridad. Un atacante con pocos privilegios podría aprovechar esta vulnerabilidad para manipular…

Validación insuficiente del nombre de archivo en Ivanti Endpoint Manager anterior a 2024 SU3 SR1 y 2022 SU8 SR2 permite a un atacante remoto no autenticado lograr la ejecución remota de código. Se requiere interacción del usuario.

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise.

A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file.