CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

CVE-2022-37931

CVE-2022-37931 – NetBatch-Plus unauthorized access . Multiple sources confirm a vulnerability in NetBatch-Plus that could allow unauthorized access to the application. HPESBNS04388 provides a workaround and fix. The CNVD entry and PT-Security page reference affected versions without giving precis...

CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

Hewlett Packard Enterprise NetBatch-Plus 授权问题漏洞

Hewlett Packard Enterprise NetBatch-Plus is a path application from Hewlett Packard Enterprise that provides a screen-driven interface to the NetBatch job management system. An unauthorized vulnerability exists in Hewlett Packard Enterprise NetBatch-Plust 9189h01 and later, versions prior to...

PT-2022-24163 · Hewlett Packard · Netbatch-Plus

Name of the Vulnerable Software and Affected Versions: NetBatch-Plus affected versions not specified Description: A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix, with details available in HPE Security Bulletin...

CVE-2022-3762

The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not validate files to download in some of its modules, which could allow ShopManager and Admin to download arbitrar...

Mozilla: Keystroke Side-Channel Leakage

The Mozilla Foundation Security Advisory describes this flaw as: Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. Cache-based timing attacks such as Prime+Probe could have possibly figured out which keys were being pressed...

PT-2022-7164 · Manageengine · Manageengine Servicedesk Plus +2

Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus versions 14104 and earlier ManageEngine ServiceDesk Plus MSP versions 14000 and earlier ManageEngine Support Center Plus versions 14000 and earlier ManageEngine Asset Explorer versions 6987 and earlier Descriptio...

ManageEngine ServiceDesk Plus getAsDoc XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of ManageEngine ServiceDesk Plus. Authentication is required to exploit this vulnerability. The specific flaw exists within the getAsDoc function. Due to the improper restriction of XML External...

PT-2022-25530 · Zoho · Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior Description: The issue is related to an XML External Entity attack, which leads to Information Disclosure. This attack can potentially expose sensitive information. Recommendations:...

ManageEngine ServiceDesk Plus invokeDataUploadTool Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine ServiceDesk Plus. Authentication is required to exploit this vulnerability. The specific flaw exists within the invokeDataUploadTool function. The issue results from the lack of proper...

PT-2022-25529 · Zoho · Zoho Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior Description: The issue is related to authenticated command injection, which can be exploited by high-privileged users. Recommendations: For Zoho ManageEngine ServiceDesk Plus version...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

Command injection

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

Security Bulletin: Vulnerabilities in Golang Go affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift

Summary Golang Go is vulnerable to denial of service, obtaining sensitive information, HTTP request smuggling, and directory traversal which may affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift. Vulnerability Details CVEID:CVE-2022-32149...

CVE-2022-42904

CVE-2022-42904 affects Zoho ManageEngine ADManager Plus (versions up to 7151). The vulnerability allows an authenticated administrator to execute commands in the proxy settings, representing a potential remote/local command execution in the agent/management interface as described across multiple ...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

PT-2022-16429

Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to damage the page where the agents are listed due to an unauthenticated access vulnerability. Recommendations At th...

PT-2022-16428

Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to obtain critical information due to an unauthenticated access vulnerability. Recommendations At the moment, there ...