CVE-2021-31814

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client...

PT-2022-10052 · Unknown · Stormshield

Name of the Vulnerable Software and Affected Versions: Stormshield versions 1.1.0 Stormshield versions 2.1.0 through 2.9.0 Description: An issue exists where an attacker can block a client from accessing the VPN and obtain sensitive information through the SN VPN SSL Client. Recommendations: For...

WordPress ScrollMe theme <= 2.1.0 - Authenticated Arbitrary Plugin Activation/Deactivation vulnerability

Authenticated Arbitrary Plugin Activation/Deactivation vulnerability discovered by Ex.Mi Patchstack in WordPress ScrollMe theme versions = 2.1.0. Solution Deactivate and delete. The vendor ignores the vulnerability reports, avoids any conversation...

CVE-2021-44829

Cross Site Scripting XSS vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter...

CVE-2021-45091

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

CVE-2021-45091

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

Improper access control

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield that stems from incorrect access control in Stormshield Endpoint Security from 2.1.0 to 2.1.1...

EulerOS Virtualization 2.9.1 : expat (EulerOS-SA-2021-2756)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XMLSetEntityDeclHandle...

Marlink Sky File 路径遍历漏洞

Marlink Sky File is a product of Marlink, Inc. that is used to quickly transfer files to mobile devices. A path traversal vulnerability exists in Marlink Sky File version v2.1.0, which stems from the software's lack of effective filtering and restriction of path information submitted with the nul...

Security Bulletin: IBM Security Privileged Identity Manager is affected by WebSphere Application Server is vulnerable to a directory traversal vulnerability

Summary IBM Security Privileged Identity Manager has addressed a WebSphere Application Server is vulnerable to a Directory Traversal vulnerability. Vulnerability Details CVEID: CVE-2020-5016 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to...

CVE-2021-36982

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request...

CVE-2021-36921

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request...

MONITORAPP Application Insight Web Application Firewall 授权问题漏洞

The MONITORAPP Application Insight Web Application Firewall AIWAF is an application firewall from MONITORAPP Corporation in South Korea. A security vulnerability exists in Manager 2.1.0 before B115 on the MONITORAPP Application Insight Web Application Firewall AIWAF appliance, which stems from...

Security Bulletin: IBM Security Privileged Identity Manager is affected by vulnerability in CVE-2020-14782 (deferred from Oracle Oct 2020 CPU for Java 8)

Summary IBM Security Privileged Identity Manager has addressed a command execution vulnerability in Java SE related to the Libraries component Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an...

Security Bulletin: IBM Security Privileged Identity Manager vulnerable to local command execution vulnerability (CVE-2020-15862)

Summary IBM Security Privileged Identity Manager has addressed the following vulnerability in net-SNMP component used. Vulnerability Details CVEID: CVE-2020-15862 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by an improper...

Design/Logic Flaw

SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...

Security feature bypass

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

CVE-2021-31223

SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows the deletion of some security policies when accessing a computer on which the management console is...