CVE-2024-31976 : ENGENIUS EWS356-FIR UP TO 1.1.30 CONTROLLER CONNECTIVITY OS COMMAND INJECTION
Description EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity
CVE-2024-42327 : ZABBIX UP TO 6.0.31/6.4.16/7.0.1 API ADDRELATED OBJECTS SQL INJECTION
Description A non-admin user account on the Zabbix frontend with the default User role, or with any other role that
CVE-2024-11667 : Zyxel ATP/USG FLEX/USG FLEX 50(W)/USG20(W)-VPN UP TO 5.38 URL PATH TRAVERSAL
Description A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG
CVE-2024-5921 : PALO ALTO NETWORKS GLOBALPROTECT APP UP TO 6.2.5/6.3 ROOT CERTIFICATE VALIDATION
Description An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app
CVE-2024-53676 : HPE INSIGHT REMOTE SUPPORT PRIOR 7.14.0.629 PATH TRAVERSAL
Description A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution. References https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us For
CVE-2024-8676 : RED HAT ENTERPRISE LINUX/OPENSHIFT CONTAINER PLATFORM CRI-O IMPROPER AUTHORIZATION
Description A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container
CVE-2019-17082 : OPENTEXT ACCUREV FOR LDAP INTEGRATION 2017.1 MISSING AUTHENTICATION
Description Missing Authentication for Critical Function vulnerability in OpenText™ AccuRev for LDAP Integration allows Authentication Bypass. The vulnerability could allow
CVE-2024-52008 : ETHYCA FIDES UP TO 2.49.X API ENDPOINT ACCEPT-INVITE CLIENT-SIDE ENFORCEMENT OF SERVER-SIDE SECURITY
Description Fides is an open-source privacy engineering platform. The user invite acceptance API endpoint lacks server-side password policy enforcement, allowing
What Is User And Entity Behavior Analytics (UEBA)?
User and Entity Behavior Analytics (UEBA) is a cybersecurity solution that uses advanced analytics to detect anomalies in the behavior