CVE-2021-39273

In XeroSecurity Sn1per 9.0 free version, insecure permissions 0777 are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges...

Possible Open Redirect in Host Authorization Middleware

There is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2021-22942. Versions Affected: = 6.0.0. Not affected: 6.0.0 Fixed Versions: 6.1.4.1, 6.0.4.1 Impact ------ Specially crafted...

PT-2021-7012

Name of the Vulnerable Software and Affected Versions Lenovo PCManager versions prior to 4.0.40.2175 Description A denial of service issue was reported that could allow configuration files to be written to non-standard locations during installation. The vulnerability is related to insufficient...

spring-cloud-config-server: sending a request using a specially crafted URL can lead to a directory traversal attack

A flaw was found in spring-cloud-config in versions prior to 2.1.9 and 2.2.3. Applications are allowed to serve arbitrary configuration files through the spring-cloud-config-server module allowing an attacker to send a request using a specially crafted URL to create a directory traversal attack...

PT-2021-21194 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.3 Description: The issue is related to an improper verification of cryptographic signatures, allowing a local authenticated malicious user to exploit the vulnerabili...

PT-2021-3733

Name of the Vulnerable Software and Affected Versions GIS.BlockPost.GUI affected versions not specified Description The issue is related to the use of a symmetric encryption key that is hardcoded in the program. This could allow an attacker to decrypt files containing configuration information...

The vulnerability of the “Blockhost-Net” information protection software allows a perpetrator to gain access to the protected information.

The vulnerability of the GIS.BlockPost.GUI application, a software tool for information protection, is related to the use of a symmetric encryption key defined in the program code. Exploiting this vulnerability could allow an attacker to decrypt files containing information about the program’s...

NCH Reflect CRM Information Disclosure Vulnerability

An information disclosure vulnerability exists in NCH Reflect CRM, a customer relationship management software. The vulnerability stems from a failure to add valid access to configuration files and a failure to validate user permissions, which could be exploited by a local attacker to discover...

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

Code injection

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

Design/Logic Flaw

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

CVE-2021-37468

CVE-2021-37468 affects NCH Reflect CRM 3.01. The vulnerability enables local users to disclose plaintext user account information by reading configuration files, due to inadequate access control and insecure storage of credentials in configuration data. Impact is information disclosure with local...

PT-2021-21683

Name of the Vulnerable Software and Affected Versions NCH Reflect CRM version 3.01 Description The issue allows local users to discover cleartext user account information by reading the configuration files. Recommendations For NCH Reflect CRM version 3.01, consider restricting access to the...

PT-2021-21666

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows local users to discover cleartext login information relating to users by reading the local .dat configuration files. Recommendations For versions 2.03 and earlier, consider...

NCH Reflect CRM 信息泄露漏洞

An information disclosure vulnerability exists in NCH Reflect CRM, a customer relationship management software. The vulnerability stems from a failure to add valid access to configuration files and a failure to validate user permissions, which could be exploited by a local attacker to discover...