CVE-2023-30242

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.Read More ...

Continue Reading
CVE-2023-27870

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2023-32235

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static- ...

Continue Reading
CVE-2023-28068

Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authenticated malicious user can potentially exploit this vulnerability leading to privileg ...

Continue Reading
CVE-2022-45048

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended ...

Continue Reading
CVE-2023-2535

** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Read More ...

Continue Reading
CVE-2021-40331

An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in ...

Continue Reading
CVE-2023-2536

** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: