Poly EagleEye Director 操作系统命令注入漏洞

Poly EagleEye Director is a conference camera system with automated people tracking capabilities from Poly, Inc. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from the presence of multiple authenticated remote command injectio...

Poly EagleEye Director 操作系统命令注入漏洞

Poly EagleEye Director is a conference camera system with automated people tracking from Poly USA. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from...

apache-airflow-providers-celery (>=2.1.0 <=2.1.0rc2), celery-director (>=0.5.0 <=0.6.0) +4 more potentially affected by CVE-2022-30034 via flower (>=0.9.3 <=1.1.0)

flower PYPI version =0.9.3, =2.1.0, =0.5.0, =0.6.0, =0.2.1a0, =2.10.9 Source cves: CVE-2022-30034 Source advisory: OSV:GHSA-Q4QM-XHF9-4P8F...

Cisco UCS Director Log4j Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)

Cisco UCS Director is affected by the following critical vulnerability in the Apache Log4j Java logging library as described in the cisco-sa-apache-log4j-qRuKNEbd advisory. - Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 JNDI features used in configuration, log messages, and...

apache-airflow-providers-celery (>=2.1.0 <=2.1.0rc2), celery-director (>=0.5.0 <=0.6.0) +4 more potentially affected by CVE-2022-30034 via flower (>=0.9.3 <=1.1.0)

flower PYPI version =0.9.3, =2.1.0, =0.5.0, =0.6.0, =0.2.1a0, =2.10.9 Source cves: CVE-2022-30034 Source advisory: OSV:PYSEC-2022-42973...

CVE-2022-20765

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

CVE-2022-20765

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

Cross site scripting

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

CVE-2022-20765

Cisco UCS Director web applications are vulnerable to Cross-Site Scripting (XSS) due to unsanitized user input. An authenticated, remote attacker could submit crafted JavaScript, potentially rewriting page content, accessing sensitive information stored in the apps, and altering form data. A Cisc...

CVE-2022-20765 Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

CVE-2022-20765 Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

CVE-2022-29333

A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...

CVE-2022-29333

A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...

Design/Logic Flaw

A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...

CVE-2022-29333

CVE-2022-29333 affects CyberLink PowerDirector v14, enabling privilege escalation via a crafted executable. The public descriptions confirm a local escalation Vector with user interaction required and partial to high impact on confidentiality, integrity, and availability per CVSS metrics, but no ...

CVE-2022-29333

A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...

Jenkins vFabric Application Director Plugin Insufficiently Protected Credentials

vFabric Application Director Plugin stores the Application Director password unencrypted in its global configuration file jfullam.vfabric.jenkins.plugin.ApplicationDirectorPostBuildDeployer.xml on the Jenkins controller. This password can be viewed by users with access to the Jenkins controller...

GHSA-HX82-2GGV-VWM5 Jenkins vFabric Application Director Plugin Insufficiently Protected Credentials

vFabric Application Director Plugin stores the Application Director password unencrypted in its global configuration file jfullam.vfabric.jenkins.plugin.ApplicationDirectorPostBuildDeployer.xml on the Jenkins controller. This password can be viewed by users with access to the Jenkins controller...

Openstack Octavia Access Control Vulnerability

Description An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if...

Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-UCS-XSS-uQSME3L7 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...