330 matches found
Jenkins 插件 跨站请求伪造漏洞
Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. Jenkins SWAMP Plugin cross-site request forgery vulnerability. An attacker with general or read privileges can exploit this vulnerability to connect to a specified URL using a specified credential ID to capture...
CVE-2021-36333
Dell EMC CloudLink 7.1 and all prior versions contain a Buffer Overflow Vulnerability. A local low privileged attacker, may potentially exploit this vulnerability, leading to an application crash...
CVE-2021-31356
A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability allows an...
CVE-2021-31357
A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability...
Command injection
A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability...
CVE-2021-31358 Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script
A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability allow...
Juniper Networks Junos OS 操作系统命令注入漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS suffers from an operating system command injection vulnerability that originates in the tcpdump...
CyberArk Credential Provider Local Cache Can Be Decrypted
Vulnerability Details Affected Vendor: CyberArk Affected Product: Application Access Manager/Credential Provider Affected Version: Prior to 12.1 Platform: Linux/Windows/zOS CWE Classification: CWE-326: Inadequate Encryption Strength CVE ID: CVE-2021-31798 2. Vulnerability Description CyberArk...
IBM Security SOAR has an unspecified vulnerability
IBM Security SOAR, formerly Resilient, is an IBM product designed to help your security team confidently address cyber threats, automate through intelligence, and collaborate through consistency. minimum privilege level to perform operations, which can create new vulnerabilities or amplify the...
CVE-2021-29802
IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses...
Code injection
IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses...
CVE-2021-29802
IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses...
CVE-2021-29802
IBM Security SOAR (Resilient App Host) is affected by CVE-2021-29802. The vulnerability arises from performing an operation at a privilege level higher than the minimum required, potentially creating or amplifying weaknesses. Affected product: Resilient OnPrem (IBM Security SOAR). Remediation: up...
HashiCorp Nomad Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HashiCorp Nomad Remote Command Execution', 'Description' = %q Create a batch job on HashiCorp's Nomad service to spawn a shell. The default optio...
CVE-2021-2247
Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite component: Admin. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanc...
Huawei Data Communication: Configuring Secure User Authentication Modes and Permission Levels
Configure user rights in the user-interface VTY view. In password authentication mode, this permission is the actual login permission. In AAA authentication mode, this parameter takes effect if no user rights are configured on the AAA server. Configuring password authentication on the VTY is...
Code injection
The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 all firmware versions prior to 02A04.1...
CVE-2021-27454
The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 all firmware versions prior to 02A04.1...
CVE-2021-27454
CVE-2021-27454 affects GE Reason DR60 firmware prior to 02A04.1, where the software performs an operation at a privilege level higher than required, enabling execution with unnecessary privileges. This is documented across multiple sources (NVD, Red Hat, CNVD, CVE listings, and CISA ICS advisory)...
TIBCO Security Advisory: March 23, 2021 - TIBCO Rendezvous -2021-28817
TIBCO Rendezvous Windows Platform Installation vulnerability Original release date:March 23, 2021 Last revised: CVE-2021-28817 Source: TIBCO Software Inc. Products Affected TIBCO Rendezvous versions 8.5.1 and below TIBCO Rendezvous Developer Edition versions 8.5.1 and below The following componen...