Show filters
350 Total Results
Displaying 21-30 of 350
Sort by:
Attacker Value
Unknown

CVE-2024-47476

Disclosure Date: December 03, 2024 (last updated February 04, 2025)
Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Attacker Value
Unknown

CVE-2024-21958

Disclosure Date: November 12, 2024 (last updated December 19, 2024)
Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Attacker Value
Unknown

CVE-2024-21957

Disclosure Date: November 12, 2024 (last updated December 19, 2024)
Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Attacker Value
Unknown

CVE-2024-50498

Disclosure Date: October 28, 2024 (last updated October 31, 2024)
Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0.
Attacker Value
Unknown

CVE-2024-45373

Disclosure Date: September 25, 2024 (last updated October 02, 2024)
Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
Attacker Value
Unknown

CVE-2024-45066

Disclosure Date: September 25, 2024 (last updated October 02, 2024)
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.
Attacker Value
Unknown

CVE-2024-43693

Disclosure Date: September 25, 2024 (last updated October 02, 2024)
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands.
Attacker Value
Unknown

CVE-2024-43692

Disclosure Date: September 25, 2024 (last updated October 02, 2024)
An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.
Attacker Value
Unknown

CVE-2024-43423

Disclosure Date: September 25, 2024 (last updated October 02, 2024)
The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed.
Attacker Value
Unknown

CVE-2024-41725

Disclosure Date: September 25, 2024 (last updated October 01, 2024)
ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.