4759 matches found
CVE-2024-0801 Unauthenticated DoS in Arcserve Unified Data Protection
A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll...
CVE-2024-0800 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...
CVE-2024-0800
CVE-2024-0800 affects Arcserve Unified Data Protection versions 8.1–9.2. The issue is a path traversal in edge-app-base-webui.jar, specifically ImportNodeServlet, allowing traversal of filesystem paths. Impact details are consistent across sources (high severity per CVSS metrics). PT-Security not...
CVE-2024-0800 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...
CVE-2024-0799 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
CVE-2024-0799
Arcserve UDP (Arcserve Unified Data Protection) 8.1–9.2 is affected by an authentication bypass in edge-app-base-webui.jar, specifically EdgeLoginServiceImpl.doLogin() within wizardLogin. The vulnerability enables bypassing authentication and unauthorized access. Documented impacted versions: 8.1...
CVE-2024-0799 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
PT-2024-15834
Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection versions 8.1 through 9.2 Description A denial of service issue exists in the ASNative.dll component. Recommendations For versions 8.1 through 9.2, consider restricting access to the ASNative.dll component to...
PT-2024-15833 · Arcserve · Arcserve Unified Data Protection
Name of the Vulnerable Software and Affected Versions: Arcserve Unified Data Protection versions 8.1 through 9.2 Description: A path traversal issue exists in the edge-app-base-webui.jar, specifically affecting the ImportNodeServlet function. This issue is present in the mentioned versions of...
Arcserve Unified Data Protection Security Vulnerability
Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection versions 9.2 and 8.1, which stems from a denial of service vulnerability in ASNative.dll...
Arcserve Unified Data Protection Security Vulnerability
Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection versions 9.2 and 8.1, which originates in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server. An authentication...
PT-2024-2429 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to an Information Exposure vulnerability that could result in a Security feature bypass, allowing an attacker to gain unauthorized access to sensitive...
PT-2024-2253 · Microsoft · Outlook For Android
Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Outlook for Android client. Exploitation of this issue may allow a remote attacker to gain...
Data brokers admit they’re selling information on precise location, kids, and reproductive healthcare
Information newly made available under California law has shed light on data broker practices, including exactly what categories of information they trade in. Any business that meets the definition of data broker must register with the California Privacy Protection Agency CPPA annually. The CPPA...
Guide: On-Prem is Dead. Have You Adjusted Your Web DLP Plan?
As the shift of IT infrastructure to cloud-based solutions celebrates its 10-year anniversary, it becomes clear that traditional on-premises approaches to data security are becoming obsolete. Rather than protecting the endpoint, DLP solutions need to refocus their efforts to where corporate data...
PT-2024-2625 · Unknown · Codeium-Chrome
Name of the Vulnerable Software and Affected Versions: codeium-chrome affected versions not specified Description: The issue is related to the lack of protection for service data in the codeium-chrome plugin. An attacker can exploit this to send arbitrary requests to the internal autocomplete...
CVE-2024-23292
This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access information about a user's contacts...
CVE-2024-23292
This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to access information about a user's contacts...
CVE-2024-23275
A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to access protected user data...
