https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 23:17:06 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-15644 cnvd-2018-15644 https://cve.radiocsirt.org/vuln/cnvd-2018-15644 https://cve.radiocsirt.org/vuln/euvd-2026-65034 EUVD-2026-65034 https://cve.radiocsirt.org/vuln/euvd-2026-65034 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11142 <p>The &#39;systemui/settings_network.php&#39; and &#39;systemui/settings_patching.php&#39; scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the &#39;Host&#39; and &#39;X_Forwarded_For&#39; HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.</p> <p>The &#39;systemui/settings_network.php&#39; and &#39;systemui/settings_patching.php&#39; scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the &#39;Host&#39; and &#39;X_Forwarded_For&#39; HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11142 https://cve.radiocsirt.org/vuln/ghsa-2qcm-cv9r-3v6h <p>The &#39;systemui/settings_network.php&#39; and &#39;systemui/settings_patching.php&#39; scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the &#39;Host&#39; and &#39;X_Forwarded_For&#39; HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.</p> <p>The &#39;systemui/settings_network.php&#39; and &#39;systemui/settings_patching.php&#39; scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the &#39;Host&#39; and &#39;X_Forwarded_For&#39; HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.</p> https://cve.radiocsirt.org/vuln/ghsa-2qcm-cv9r-3v6h https://cve.radiocsirt.org/vuln/gsd-2018-11142 gsd-2018-11142 https://cve.radiocsirt.org/vuln/gsd-2018-11142