Vulnerability fixed in Sophos Firewall

A vulnerability has been fixed in Sophos Firewall.The vulnerability is located in the User Portal and Webadmin of the Sophos Firewall. The vulnerability allows a remote malicious person able to execute arbitrary code. Sophos has indicated that this vulnerability is being exploited on a limited...

Assura Personnel Data Systems Vista 7 路径遍历漏洞

Assura Personnel Data Systems Vista 7 PDS Vista 7 is a generic tax program from Assura. A security vulnerability in the External Applicants Security Hotfix XA client for Assura Personnel Data Systems Vista 7 versions prior to 7.1.7.2, which stems from improperly restricting pathnames to restricte...

Adobe Captivate Privilege Escalation Vulnerability (APSB21-06) - Windows

Adobe Captivate is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:captivate...

Adobe Framemaker Security Updates (APSB21-74) - Windows

Adobe Framemaker is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:framemaker"; if...

CVE-2022-31322

Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables...

InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal Vulnerability

Title: ====== AVEVA InTouch Access Anywhere Secure Gateway - Path Traversal Author: ======= Jens Regel, CRISEC IT-Security CVE: ==== CVE-2022-23854 Advisory: ========= https://crisec.de/advisory-aveva-intouch-access-anywhere-secure-gateway-path-traversal/ Timeline: ========= 25.06.2021...

InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal

Title: ====== AVEVA InTouch Access Anywhere Secure Gateway - Path Traversal Author: ======= Jens Regel, CRISEC IT-Security CVE: ==== CVE-2022-23854 Advisory: ========= https://crisec.de/advisory-aveva-intouch-access-anywhere-secure-gateway-path-traversal/ Timeline: ========= 25.06.2021...

Exploit for Path Traversal in Zimbra Collaboration

CVE-2022-37042 Zimbra CVE-2022-37042 Nuclei weaponized tem...

Virtuozzo Hybrid Infrastructure 5.2 Hotfix 1 (5.2.0-141)

This update provides important fixes for the compute service. Vulnerability id: VSTOR-56942 If a virtual machine is connected to a VLAN-based physical network, the VM may have no network connectivity after its migration due to a missing ARP announcement. Vulnerability id: VSTOR-56792, VSTOR-56789...

Siemens SICAM TOOLBOX II

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SICAM TOOLBOX II Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability results in full access to the database. 3. TECHNICAL...

Veeam Backup for Microsoft 365 Auto-Update Fails - "Offline thumbprint check failed: certificate is invalid"

Challenge Veeam Backup for Microsoft 365's auto-update activated via the user interface may fail with: Offline thumbprint check failed: certificate is invalid. Cause This error is related to the Veeam Backup for Microsoft 365 updater's certificate checks. Solution This issue was resolved starting...

Huawei EulerOS: Gather Applied HotFix (SSH Login)

Gathers information about applied HotFixes/Livepatches for EulerOS via the provided Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

"Failed to import signatures" - Veeam Intelligent Diagnostic Signatures Update Failure

Challenge Attempting to update Veeam Intelligent Diagnostics signatures fails, and a pop-up appears with the message: Failed to import signatures Cause This issue occurs due to recent certificate changes that affected the Veeam Intelligent Diagnostics signature update process. Solution Option 1:...

Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 3 (7.5.3-409)

The Hotfix 3 for Virtuozzo Hybrid Server 7.5 Update 3 provides new features...

Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 2 (7.5.3-407)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 3 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-140018 Unable to set an IP address to containers based on the vzlinux-stream-9-x8664 and centos-stream-9-x8664 templates. Vulnerability id: PSBM-140305...

APSB22-31 : Security hotfix available for RoboHelp Server

Adobe has released a security hotfix for RoboHelp Server 11 Update 3, and prior releases. This hotfix resolves a security vulnerability that allows end users with non-administrative privileges to manipulate API requests and elevate their account privileges to that of a server administrator. This...

GHSA-8G72-GQ68-6GQH Products.CMFPlone Open Redirect Vulnerability

When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'camefrom' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on a specially crafte...

GHSA-QC57-H2F7-P4HX Plone Unauthorized Access Vulnerability

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...

Plone Unauthorized Access Vulnerability

Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5...