13519 matches found
VMware Spring Cloud Config 2.1 < 2.1.9 / 2.2 < 2.2.3 Directory Traversal
The version of Spring Cloud Config running on the remote host is affected by a directory traversal vulnerability. Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the...
CVE-2022-2553
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...
CVE-2022-2553
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...
Authentication flaw
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...
CVE-2022-2553
CVE-2022-2553 concerns the Booth cluster ticket manager. Multiple connected sources confirm the root cause: the authfile directive in the booth configuration is ignored, preventing proper authentication enforcement between nodes. This leads to a risk that nodes without the correct authentication ...
CVE-2022-2553
The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...
VMware Spring Cloud Config Installed
Binary data vmwarespringcloudconfiginstalled.nbin...
CVE-2022-26307
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 t...
WAVLINK WiFi-Repeater 安全漏洞
WAVLINK WiFi-Repeater is a WiFi range extender from China RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 version. An attacker exploited the vulnerability to arbitrarily configure device settings by accessing the mbwifibasic.shtm...
The vulnerability of the config_rollback() function implementation in the Microprogrammed Software VPN Routers of Robustel R1510 allows a perpetrator to execute arbitrary commands.
The vulnerability of the configrollback function implementation in the Robustel R1510 VPN router software lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands b...
Malicious code in eslint-config-cap-it-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ca18ac9151018c2825df547bec5cd5b5e89b8fa04a66c3df553d1192ed5719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2792 Malicious code in eslint-config-cap-it-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ca18ac9151018c2825df547bec5cd5b5e89b8fa04a66c3df553d1192ed5719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-34049
An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...
USN-5525-1 libxml-security-java vulnerability
It was discovered that Apache XML Security for Java incorrectly passed a configuration property when creating specific key elements. This allows an attacker to abuse an XPath Transform to extract sensitive information...
CVE-2022-26117
An empty password in configuration file vulnerability CWE-258 in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI...
Parallels Access 代码问题漏洞
Parallels Access is a parallel access application from Parallels USA. enabling the fastest, easiest, and most reliable remote access to your computer from anywhere. A security vulnerability exists in Parallels Access Agent version 6.5.3 39313 that stems from This vulnerability allows a local...
CVE-2022-31213
An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file...
DEBIAN-CVE-2022-31213
An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config file...
