The vulnerability of the doLogin() function in the EdgeLoginServiceImpl class of the wizardLogin component of the data protection software for ArcServe UDP allows a perpetrator to bypass the authentication process.

The vulnerability of the doLogin function in the EdgeLoginServiceImpl class of the wizardLogin component of the data protection software for ArcServe UDP is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass the authentication...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the microprogramming software for UniLogic Studio programmable logic controllers of the UniStream series lies in the insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the microprogramming software for UniLogic Studio series UniStream is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and enhance their...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices involve a data protection mechanism that can be exploited, allowing an attacker to cause the device to fail.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the Libgcrypt cryptographic library lies in the insufficient protection of service data due to timing differences, allowing attackers to execute the Bleichenbacher attack or the Marvin attack.

The vulnerability of the Libgcrypt cryptographic library is related to insufficient protection of service data due to timing differences. Exploiting this vulnerability allows a remote attacker to execute a Bleichenbacher attack or a Marvin attack...

PT-2024-2272 · Unitronics · Unistream +1

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to insufficient protection of service data in the UniLogic Studio software for UniStream series programmable logic controllers. Exploitation of this...

The vulnerability of cloud-based data storage software for IBM Watson CP4D Data Stores lies in the lack of encryption measures for protected data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of cloud-based data storage software for IBM Watson CP4D Data Stores lies in the lack of encryption measures for protected data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the vantage6-UI interface of the Vantage6 confidential data protection platform allows a perpetrator to gain unauthorized access to the protected information.

The vulnerability of the vantage6-UI interface of the Vantage6 confidential data protection platform is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the Dell EMC NetWorker backup and data recovery system, related to insufficient protection of registration data, allows a perpetrator to obtain user registration data.

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the insufficient protection of registration data. Exploiting these vulnerabilities could allow attackers to obtain user registration data...

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows lies in the lack of protection for service data, allowing a intruder to disclose the protected information.

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a hacker to disclose the protected information...

CVE-2024-0799

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...

CVE-2024-0800

A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...

CVE-2024-0800

A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...

CVE-2024-0801

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll...

Path traversal

A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...

Denial of service

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll...

Authentication flaw

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...

CVE-2024-0801 Unauthenticated DoS in Arcserve Unified Data Protection

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll...

CVE-2024-0801

CVE-2024-0801 affects Arcserve Unified Data Protection (UDP) in the ASNative.dll component. The connected documents specify a denial-of-service (DoS) vulnerability exploitable in UDP versions 8.1 through 9.2, caused by issues in ASNative.dll. Reported impact is system unavailability or crashes, l...