Lucene search
+L

3792 matches found

attackerkb
attackerkb
•added 2022/02/15 3:15 p.m.•15 views

CVE-2022-24684

HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6...

6.5CVSS6.6AI score0.01396EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/02/15 2:04 p.m.•34 views

CVE-2022-24684

HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6...

6.6AI score0.01396EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2022/02/15 2:04 p.m.•95 views

CVE-2022-24684

HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6...

6.5CVSS6.4AI score0.01396EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/15 2:04 p.m.•66 views

CVE-2022-24684

Removed by vendor...

6.5CVSS6.5AI score0.01396EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/15 12:00 a.m.•9 views

CVE-2022-24684: Undefined Security Weakness

HashiCorp Nomad and Nomad Enterprise 0.9.0 through 1.0.16, 1.1.11, and 1.2.5 allow operators with job-submit capabilities to use the spread stanza to panic server agents. Fixed in 1.0.18, 1.1.12, and 1.2.6...

6.5CVSS6.7AI score0.01396EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/09 11:15 p.m.•17 views

CVE-2022-22544

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.1CVSS7.5AI score0.01399EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/02/09 11:15 p.m.•19 views

CVE-2022-22544

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.1CVSS6.1AI score0.01399EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/09 11:15 p.m.•25 views

Information disclosure

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

6.5CVSS9.2AI score0.01399EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•6 views

CVE-2022-22544: Undefined Security Weakness

Solution Manager Diagnostics Root Cause Analysis Tools - version 720, allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty f...

9.1CVSS8.3AI score0.01399EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•12 views

PT-2022-2173 · Sap · Sap Solution Manager

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager version 720 Description: The issue is related to insufficient access control in the SAP Solution Manager Diagnostics Root Cause Analysis tool, allowing a remote attacker to elevate their privileges. This can enable an...

9.1CVSS9.3AI score0.01399EPSS
SaveExploits0References9
OSV
OSV
•added 2022/02/01 8:03 p.m.•16 views

ALBA-2022:0347 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed...

7AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2022/02/01 8:03 p.m.•39 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: gcp-vpc-move-vip, gcp-vpc-move-route, gcp-pd-move: A failed...

2.1AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2022/02/01 8:03 p.m.•18 views

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

1.3AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/01 11:01 a.m.•85 views

CVE-2022-23607

treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods treq.get, treq.post, etc. and treq.client.HTTPClient constructor accept cookies as a dictionary. Such cookies are not bound to a single domain, and are therefore sent to every domain...

6.5CVSS6.2AI score0.01083EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•4 views

PT-2022-1001

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue affects the resource-agents packages, which provide scripts for the Pacemaker and RGManager service managers to operate in a high-availability environment. A failed API call...

5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/30 12:15 a.m.•16 views

CVE-2021-46660

Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...

9.8CVSS7.8AI score0.01158EPSS
SaveExploits0References3
OSV
OSV
•added 2022/01/30 12:15 a.m.•13 views

CVE-2021-46660

Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...

9.8CVSS7.3AI score0.01158EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/30 12:15 a.m.•28 views

CVE-2021-46660

Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...

9.8CVSS0.01158EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/30 12:15 a.m.•25 views

Xxe

Signiant Manager+Agents before 15.1 allows XML External Entity XXE attacks...

7.5CVSS9.4AI score0.01158EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/01/30 12:00 a.m.•14 views

Signiant flight 代码问题漏洞

Signiant flight is a unique utility from Signiant USA for optimizing the transfer of large data sets to and from the cloud. A security vulnerability in Manager+Agents before Signiant flight deck 15.1 allows XML External Entity XXE attacks...

9.8CVSS8.3AI score0.01158EPSS
SaveExploits0References3
Rows per page
Query Builder