10225 matches found
CVE-2023-42229
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service...
CVE-2023-42227
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...
World Tour Survey: Cloud Engineers Wrestle with Risk
Trend surveyed 750 cybersecurity professionals in 49 countries to learn more about the state of cybersecurity, from job pressures to the need for more advanced tools. Explore what cloud security engineers teams had to say...
PT-2025-1459 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Cross Site Scripting XSS vulnerability via the Filter/FilterEditor function. This allows for potential malicious script execution. No informatio...
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced
The vulnerability of AMD Secure Processor’s microprogramming software is related to improper validation of input data, allowing attackers to exploit their privileges.
The vulnerability of AMD Secure Processor ASP microprogramming software relates to improper validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2025-1452 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Directory Traversal via the Email/SaveAttachment function. This allows unauthorized access to sensitive files and directories. Recommendations: Fo...
CVE-2023-42233
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the Filter/FilterEditor function...
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...
CVE-2024-57805
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...
CVE-2024-9134
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges...
CVE-2024-9134
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges...
CVE-2024-47520
A user with advanced report application access rights can perform actions for which they are not authorized...
CVE-2024-47520
A user with advanced report application access rights can perform actions for which they are not authorized...
CVE-2024-47520 A user with advanced report application access rights can perform actions for which they are not authorized
A user with advanced report application access rights can perform actions for which they are not authorized...
CVE-2024-47520 A user with advanced report application access rights can perform actions for which they are not authorized
A user with advanced report application access rights can perform actions for which they are not authorized...
CVE-2024-47520
Summary of CVE-2024-47520 (Arista NGFW/ETM): A user with advanced reporting application access rights can perform actions beyond authorization. Documented as part of Arista Security Advisory 0105, the issue is tied to the reporting component and allows privilege misuse by users with limited admin...
PT-2025-3710 · Arista · Arista Edge Threat Management
Name of the Vulnerable Software and Affected Versions: Arista Edge Threat Management versions up to 17.1.1 Description: Multiple SQL Injection vulnerabilities exist in the reporting application, allowing a user with advanced report application access rights to exploit the SQL injection. This...
Arista NG Firewall 安全漏洞
Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista NG Firewall that originates from a user with advanced reporting application access rights can perform unauthorized actions...