115 matches found
Veritas InfoScale CmdServer 访问控制错误漏洞
Veritas InfoScale CmdServer is a command execution and remote management service component provided by Veritas Corporation in the US, designed for InfoScale cluster environments. Versions of Veritas InfoScale CmdServer prior to 7.4.2 contained an access control vulnerability, which was caused by...
CVE-2026-44926
InfoScale CmdServer is affected by CVE-2026-44926 where versions prior to 7.4.2 mishandle access control, potentially enabling unauthenticated network attackers with low privileges and no user interaction to compromise confidentiality, integrity, and availability (CVSS v3.1: 8.8). The condition i...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
PT-2026-42197
Name of the Vulnerable Software and Affected Versions InfoScale CmdServer versions prior to 7.4.2 Description InfoScale CmdServer mishandles access control, which may allow unauthorized users to perform restricted actions. Recommendations Update InfoScale CmdServer to version 7.4.2 or later...
PT-2026-42195
Name of the Vulnerable Software and Affected Versions InfoScale VIOM version 9.1.3 Description Cross-site Scripting XSS is possible in the software. XSS is a type of security flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations At the...
CVE-2026-44926
InfoScale CmdServer before 7.4.2 mishandles access control...
Veritas InfoScale VIOM SQL注入漏洞
Veritas InfoScale VIOM is an infrastructure monitoring and operations management platform for virtualized environments developed by Veritas Corporation in the United States. Versions of Veritas InfoScale VIOM prior to 9.1.3 contained a SQL injection vulnerability. This vulnerability stems from SQ...
CVE-2026-44923
SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges...
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS...
CVE-2026-44925
Cross-Site Request Forgery CSRF vulnerability in InfoScale v.9.1.3 Operations Manager VIOM allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web application without the user's knowledge...
CVE-2026-44924
InfoScale VIOM 9.1.3 allows XSS...
CVE-2026-44923
CVE-2026-44923 affects InfoScale VIOM prior to 9.1.3. A SQL injection in the VIOM web application can enable remote attackers to escalate privileges. CVSS v3.1 base score 6.5 (Network, Low attack complexity, No privileges required, No user interaction, Confidentiality/Integrity low). Documents co...
PT-2026-42194
Name of the Vulnerable Software and Affected Versions InfoScale VIOM versions prior to 9.1.3 Description An SQL injection allows remote attackers to escalate privileges. SQL injection is a type of flaw that allows an attacker to interfere with the queries that an application makes to its database...
CVE-2026-44924
CVE-2026-44924 affects InfoScale VIOM 9.1.3. The connected documents consistently report a cross-site scripting (XSS) vulnerability in the VIOM web application. The CVSS metrics indicate a Network attack vector, low attack complexity, user interaction required, and low impact on confidentiality/i...
CVE-2022-26483
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting XSS vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP...
CVE-2022-26484
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via...
EUVD-2019-8489
Malware in sbrugna...
EUVD-2020-23744
Malware in sbrugna...