Binary vulnerability in Arista VEOS (CNVD-2022-18742)

Arista Networks is one of the leading manufacturers of networking equipment for large data centers, high performance computing systems and cloud networking solutions. A binary vulnerability exists in Arista VEOS, which can be exploited by attackers to cause a denial-of-service attack...

Binary vulnerability in Arista VEOS (CNVD-2022-18744)

Arista Networks is one of the leading manufacturers of networking equipment for large data centers, high performance computing systems and cloud networking solutions. A binary vulnerability exists in Arista VEOS, which can be exploited by attackers to cause a denial-of-service attack...

Binary Vulnerability in Arista VEOS

Arista Networks is one of the leading manufacturers of networking equipment for large data centers, high performance computing systems and cloud networking solutions. A binary vulnerability exists in Arista VEOS, which can be exploited by attackers to cause a denial-of-service attack...

Binary vulnerability in Arista VEOS (CNVD-2022-18740)

Arista Networks is one of the leading manufacturers of networking equipment for large data centers, high performance computing systems and cloud networking solutions. A binary vulnerability exists in Arista VEOS, which can be exploited by attackers to cause a denial-of-service attack...

Critical MQTT-Related Bugs Open Industrial Networks to RCE Via Moxa

Critical security vulnerabilities in Moxa’s MXview web-based network management system open the door to an unauthenticated remote code execution RCE as SYSTEM on any unpatched MXview server, researchers warned this week. The five bugs, affecting versions 3.x to 3.2.2, score a collective 10 out of...

XWiki Information Disclosure Vulnerability (GHSA-35fg-hjcr-j65f)

XWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

CVE-2022-0021

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions...

CVE-2022-0017

An improper link resolution before file access 'link following' vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This iss...

CVE-2022-0018

An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the GlobalProtect portal configuration. This product...

CVE-2022-0019

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

Design/Logic Flaw

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions...

Input validation

An improper link resolution before file access 'link following' vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This iss...

Design/Logic Flaw

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances...

Design/Logic Flaw

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

CVE-2022-0021

Palo Alto Networks GlobalProtect App for Windows is affected by CVE-2022-0021. The vulnerability arises from an information exposure in the log files where cleartext credentials of the connected GlobalProtect user are logged during authentication via Connect Before Logon. Affected product/version...

CVE-2022-0019 GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed...

CVE-2022-0019

The CVE-2022-0019 entry concerns Palo Alto Networks GlobalProtect App for Linux, where saved password hashes are exposed to other local users. This local-attack exposure allows an attacker to authenticate as the target user to the GlobalProtect portal/gateway without the plaintext password. Affec...

CVE-2022-0018

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on Windows and macOS allows the local user’s credentials to be sent to the GlobalProtect portal when Single Sign-On is enabled. The behavior is described as intentional; risk is present when BYOD or differing portal...

CVE-2022-0017 GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation

An improper link resolution before file access 'link following' vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This iss...

CVE-2022-0017

CVE-2022-0017 is a local privilege-escalation in the Windows GlobalProtect app caused by improper link resolution before file access. A local attacker could disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain conditions. Affected: GlobalProtect app...