7434 matches found
Vulnerability fixed in PRTG Network Monitor
A vulnerability has been fixed in PRTG Network Monitor. A malicious party can exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser with which the application is visited. Paessler has released updat...
PRTG Network Monitor < 21.3.69.1333 XSS Vulnerability
PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
ACRN Code Issues Vulnerabilities
ACRN is an open source virtual machine monitor for the Internet of Things. A null pointer dereference vulnerability exists in vqendchains in hw/pci/virtio/virtio.c in ACRN versions prior to 2.5. No detailed vulnerability details are provided at this time...
Compliance When Migrating to the Cloud: SQL Server Running on Azure vs. On- Premise
In the age of the data era, where data storage is increasing at an exponential rate and access to information is getting easier and faster, data security is a major concern. There are many cases where we can’t prevent people from accessing data, but we can track and investigate suspicious...
Weak Password Vulnerability in PRTG Network Monitor
PRTG Network Monitor is a computer network monitor that can monitor network computers, routers, switches, firewalls, database servers and more. PRTG Network Monitor suffers from a weak password vulnerability, which can be exploited by attackers to log in to the backend and obtain sensitive...
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-13938, CVE-2021-30641)
Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...
CVE-2021-32582
An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...
CVE-2021-32582
An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...
Connectwise ConnectWise Automate SQL注入漏洞
Connectwise ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise Connectwise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in versions of ConnectWise Automate prior to...
June 15, 2021—KB5003698 (OS Build 18363.1645) Preview
None None...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-29754)
Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2021-29754 DESCRIPTION: IBM WebSphere Application...
CVE-2021-27408
The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...
PRTG Network Monitor < 22.1.74 CSRF Vulnerability
PRTG Network Monitor is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...
PRTG Network Monitor < 21.1.66.1623 Information Disclosure Vulnerability
PRTG Network Monitor is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...
CVE-2021-34547
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...
CVE-2021-34547
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...
CVE-2021-34547
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...
Cross site request forgery (csrf)
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...
CVE-2021-34547
CVE-2021-34547 affects Paessler PRTG Network Monitor (version 20.1.55.1775) and is a CSRF flaw in the /editsettings endpoint that can lead to unintended user-creation actions. The description explicitly states a cross-site request forgery vulnerability in the web application, enabling an attacker...
