CVE-2022-0014

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...

Design/Logic Flaw

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...

Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...

CVE-2022-0014

An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory such as C:\ to store a program that can then be unintentionally executed by another local user when that user utilizes ...

Palo Alto Networks Cortex XDR 代码问题漏洞

Palo Alto Networks Cortex XDR is a security operations platform for remote endpoint-based detection from Palo Alto Networks Malaysia. A code issue vulnerability exists in the Palo Alto Networks Cortex XDR agent that can be exploited by an attacker to execute a live endpoint session used by a loca...

livehelperchat Information Disclosure Vulnerability

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. An information disclosure vulnerability exists in livehelperchat that stems from the inclusion of sensitive information when generating error messages. An attacker may exploit thi...

CVE-2022-0083

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

livehelperchat 安全漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. An information disclosure vulnerability exists in livehelperchat that stems from the inclusion of sensitive information when generating error messages. An attacker may exploit thi...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

CVE-2021-4175

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4176

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01688)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

CVE-2021-4177

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

livehelperchat cross-site request forgery vulnerability (CNVD-2022-01694)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...

livehelperchat 跨站请求伪造漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, and no detailed vulnerability details are provided at this time...

Medium: kernel-livepatch-4.14.248-189.473

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.248-189.473 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.248-189.473 or yum update --advisory ALAS2LIVEPATCH-2021-071 to update your system. New...

Medium: kernel-livepatch-4.14.246-187.474

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.246-187.474 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.246-187.474 or yum update --advisory ALAS2LIVEPATCH-2021-072 to update your system. New...

Security Bulletin: Is Blueworks Live affected by CVE-2021-44228 (Log4j Vulnerability)?

Summary Is Blueworks Live affected by CVE-2021-44228 Log4j Vulnerability? Vulnerability Details Please refer to the Flash Alert published here: Get Notified about Future Security Bulletins Subscribe to My Notifications to be notified of important product support alerts like this. Off Related...