Command Injection Vulnerability - CyberAlerts

N-able N-Central Command Injection Vulnerability - CyberAlerts

RARLAB WinRAR Path Traversal Vulnerability - CyberAlerts

Path traversal vulnerability in WinRAR - CyberAlerts

D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability - CyberAlerts

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged... - CyberAlerts

Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code - CyberAlerts

Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes. - CyberAlerts

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full... - CyberAlerts

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect - CyberAlerts

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution... - CyberAlerts

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection - CyberAlerts

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials - CyberAlerts

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same... - CyberAlerts

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution... - CyberAlerts

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution... - CyberAlerts

SolarWinds Serv-U L Directory Transversal Vulnerability - CyberAlerts

SolarWinds Web Help Desk Hardcoded Credential Vulnerability - CyberAlerts

Information disclosure - CyberAlerts

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by... - CyberAlerts

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13,... - CyberAlerts

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and... - CyberAlerts

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The... - CyberAlerts

A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense... - CyberAlerts

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive... - CyberAlerts

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)... - CyberAlerts

Authentication bypass using an alternate path or channel - CyberAlerts

LoadMaster Pre-Authenticated OS Command Injection - CyberAlerts

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) - CyberAlerts

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability - CyberAlerts

Microsoft SharePoint Code Injection Vulnerability - CyberAlerts

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability - CyberAlerts

CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote... - CyberAlerts

Fortinet FortiWeb SQL Injection Vulnerability - CyberAlerts

LILIN DVR Arbitrary File Read via net_html.cgi - CyberAlerts

LILIN DVR RCE via Malicious FTP/NTP Configuration - CyberAlerts

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability - CyberAlerts

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability - CyberAlerts

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability - CyberAlerts

Google Chromium V8 Type Confusion Vulnerability - CyberAlerts

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability - CyberAlerts

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability - CyberAlerts

D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal - CyberAlerts

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability - CyberAlerts

Hikka vulnerable to RCE through dangling web interface - CyberAlerts

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series - CyberAlerts

Linux Kernel Improper Ownership Management Vulnerability - CyberAlerts

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS... - CyberAlerts

TP-Link Multiple Routers Command Injection Vulnerability - CyberAlerts