PT-2021-21704

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2021.1.1 Description The issue is related to insufficient authentication checks for agent requests. Recommendations For versions prior to 2021.1.1, update to version 2021.1.1 or later to resolve the issue...

JetBrains Security Bulletin Q2 2021

JetBrains News Security JetBrains Security Bulletin Q2 2021 Robert Demmer In the second quarter of 2021, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description |...

GitLab Cross-Site Request Forgery Vulnerability (CNVD-2021-49073)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site request forgery vulnerability exists in Gitl...

PT-2021-3649

Name of the Vulnerable Software and Affected Versions HBS 3 versions prior to v3.0.210506 HBS 3 versions prior to v3.0.210507 Description An improper access control issue has been reported, affecting certain legacy versions of HBS 3. This issue allows attackers to compromise the security of the...

CVE-2020-7856

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation...

CVE-2020-7856

A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation...

PT-2021-12677

Name of the Vulnerable Software and Affected Versions: Helpcom affected versions not specified Description: A vulnerability exists due to insufficient authentication validation, allowing an unauthenticated attacker to execute arbitrary commands. Recommendations: At the moment, there is no...

PT-2021-6079 · Rpm +8 · Rpm +8

Name of the Vulnerable Software and Affected Versions: RPM affected versions not specified Description: The issue is related to insufficient authentication of data in the RPM software's signature check functionality. This allows an attacker to potentially corrupt the RPM database and execute code...

IBM Spectrum Protect Operations Center Authorization Issues Vulnerability

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control for IBM Spectrum Protect environments. An authorization issue vulnerability exists in IBM Spectrum Protect Operations Center that arises from a lack of authentication measures or insufficient...

Kangtaike SolarView Compact Access Control Error Vulnerability

Kangtaike SolarView Compact is an application system from Kangtaike, Japan. provides photovoltaic power generation measurement systems. An access control error vulnerability exists in SolarView Compact. The vulnerability arises from a lack of authentication measures or insufficient authentication...

Lucee Server Authorization Issues Vulnerability

An authorization issue vulnerability exists in Lucee Server that arises from a lack of authentication measures or insufficient authentication strength in a network system or product...

Dell EMC Avamar Server 安全漏洞

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. An authorization issue vulnerability exists in Dell EMC Avamar Server, which arises from a lack of authentication measures or insufficient authentication strength in a networked...

Marvell QConvergeConsole 路径遍历漏洞

Marvell QConvergeConsole QCC is a unified adapter management software across data centers from Marvell. The software is primarily used for Ethernet and Fibre Channel adapter management, among other things. A security vulnerability exists in the Marvell QConvergeConsole GUI version 5.5.0.74 and...

CmtViewer Authentication Bypass

The vulnerability of the CmtViewer application for controlling programmable panels is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise user credentials remotely...

Huawei FusionCompute Command Injection Vulnerability (CNVD-2020-68551)

FusionCompute is Huawei's self-developed computing virtualization software. A command injection vulnerability exists in FusionCompute 6.5.1, 8.0.0. The vulnerability stems from insufficient authentication. An attacker can exploit the vulnerability to gain higher privileges via a specially crafted...

Huawei FusionCompute 命令注入漏洞

FusionCompute is Huawei's self-developed computing virtualization software. A command injection vulnerability exists in FusionCompute 6.5.1, 8.0.0. The vulnerability stems from insufficient authentication. An attacker can exploit the vulnerability to gain higher privileges via a specially crafted...

Cisco Firepower Threat Defense (FTD) Input Validation Error Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. A security vulnerability exists in Cisco Firepower Threat Defense FTD that results from insufficient authentication when processing Ethernet frames...

Cisco HyperFlex Software Unauthenticated Root Access (cisco-sa-20190220-chn-root-access)

According to its self-reported version, Cisco HyperFlex HX-Series is affected by a vulnerability in the hxterm service due to insufficient authentication controls. An unauthenticated, local attacker can exploit this, by connecting to the hxterm service as a non-privileged, local user, in order to...

Red Hat Wildfly License Issue Vulnerability

Red Hat Wildfly is the United States Red Hat Red Hat a lightweight JavaEE-based open source application server . wildfly-security-manager is a Wildfly security manager . An authorization issue vulnerability exists in Red Hat Wildfly products. The vulnerability stems from a lack of authentication...

PT-2020-3971

Name of the Vulnerable Software and Affected Versions: VMware vCenter Server affected versions not specified VMware ESXi affected versions not specified Description: The issue is related to insufficient authentication in the virtual infrastructure management tools. It may allow a remote attacker ...