Design/Logic Flaw

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker...

CVE-2022-22783

Summary: CVE-2022-22783 affects Zoom On-Premise Meeting Connector Controller and MMR 4.8.102.20220310. The issue exposes process memory fragments to connected clients, which a passive attacker could observe, per NVD and PT-2022-15675 sources. Affected components: Zoom On-Premise Meeting Connector...

CVE-2022-22783 Process memory exposure in Zoom on-premise Meeting services

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker...

Zoom On-​​Premise Meeting Connector Controller安全漏洞

Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector from Zoom USA. A security vulnerability exists in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8. 102.20220310 A security vulnerability exists th...

PT-2022-15675 · Zoom · Zoom On-Premise Meeting Connector Mmr +1

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 Zoom On-Premise Meeting Connector MMR version 4.8.102.20220310 Description: A vulnerability in Zoom On-Premise Meeting Connector exposes process memory fragments to connect...

CVE-2022-22783

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker...

Unable to create Azure hosting connection in On-Premise Studio

When trying to create a new Azure hosting connection in on-premise Studio, it may fail with the following error: Error Id: XDDS:09449CBF Exception: Error Source : Citrix Studio StackTrace: System.Net.WebException The remote server returned an error: 400 Bad Request. at System.Net.HttpWebRequest...

Security Bulletin: IBM Planning Analytics is affected by security vulnerabilities.

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics Workspace 2.0.75. Vulnerability Details CVEID: CVE-2021-39040 DESCRIPTION: IBM Planning Analytics could be vulnerable to malicious file upload by not validating the file types or...

TeamTNT targeting AWS, Alibaba

By Darin Smith.TeamTNT is actively modifying its scripts after they were made public by security researchers.These scripts primarily target Amazon Web Services, but can also run in on-premise, container, or other forms of Linux instances.The group's payloads include credential stealers,... This i...

Design/Logic Flaw

wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript. If a user receives and views such a malicious...

CVE-2022-24799 Cross Site Scripting in Wire Webapp

wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript. If a user receives and views such a malicious...

Design/Logic Flaw

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

The vulnerability of the On Premise Install component of the Oracle Communications Pricing Design Center software allows a perpetrator to disclose protected information.

The vulnerability of the On Premise Install component of the Oracle Communications Pricing Design Center exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose protected information...

CVE-2021-30497

Ivanti Avalanche Premise 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive...

CVE-2021-30497

Ivanti Avalanche Premise 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive...

CVE-2021-30497

Ivanti Avalanche 6.3.2 on Premise is affected by CVE-2021-30497: a Local/File Inclusion/Absolute Path Traversal flaw in the /AvalancheWeb/image endpoint allows remote, unauthenticated users to read arbitrary files (e.g., C:\Windows\system32\config\system.sav) due to imageFilePath not being valida...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.9.26 security update

Red Hat OpenShift Container Platform release 4.9.26 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...

Passwork On-Premise Edition Path Traversal Vulnerability

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland.A path traversal vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...

Passwork On-Premise Edition Cross-Site Scripting Vulnerability

Passwork On-Premise Edition is a local password manager for your business from Passwork Finland. cross-site scripting vulnerability exists in versions prior to Passwork On-Premise Edition 4.6.13, no detailed vulnerability details are currently available...