CVE-2021-41827

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

PT-2021-23422

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Remote Access Plus versions prior to 10.1.2121.1 Description The issue concerns hardcoded credentials for read-only access in the source code corresponding to the DCBackupRestore JAR archive. Recommendations For versions prio...

Zoho ManageEngine Remote Access Plus has a trust management issue vulnerability

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials for read-only The...

CVE-2021-41827: Use of Hard-coded Credentials

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

[SECURITY] Fedora 34 Update: squashfs-tools-4.5-3.20210913gite048580.fc34

Squashfs is a highly compressed read-only filesystem for Linux. This package contains the utilities for manipulating squashfs filesystems...

CVE-2021-27859

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administrative privileges. Older versions of...

[SECURITY] Fedora 35 Update: squashfs-tools-4.5-3.20210913gite048580.fc35

Squashfs is a highly compressed read-only filesystem for Linux. This package contains the utilities for manipulating squashfs filesystems...

Drupal CMS Kernel Auth Bypass Info Disclosure DoS

The vulnerability of the Drupal CMS system’s kernel is related to incorrect authorization when read-only mode is set to FALSE via jsonapisettings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Libvirt Authentication DoS

The vulnerability of the Libvirt virtualization management library is related to the lack of authentication, allowing connections to only be set for read-only access. This means that libvirt waits for a response from the guest agent for a specified period of time. Exploiting this vulnerability...

CVE-2021-40066

The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and...

Mobility Read-Only API Security Vulnerability

NetMotion Mobility is a mobile VPN software from NetMotion, Inc. It is used to securely extend enterprise networks to mobile environments. A security vulnerability exists in Mobility's read-only API, which stems from access control incorrectly validating user access rights. An attacker could...

PT-2021-22790

Name of the Vulnerable Software and Affected Versions Mobility versions prior to 11.76 Mobility versions prior to 12.14 Description The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials ca...

CVE-2021-40066: Incorrect Permission Assignment for Critical Resource

The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and...

Security update for ntfs-3g_ntfsprogs (important)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2021:2971-1 Rating: important References: 1189720 Cross-References: CVE-2019-9755 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269...

CVE-2021-40385

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin...

Privilege escalation

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin...

CVE-2021-40385

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin...

PT-2021-22889

Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Software versions prior to 10.5.5-2 Description An issue was discovered in the server software, allowing a privilege escalation from a read-only user to an admin. Recommendations For versions prior to 10.5.5-2, update t...

CVE-2021-40385: Undefined Security Weakness

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin...

Unitrends Backup security vulnerability

Unitrends Backup is a set of data protection software from Unitrends, Inc. in the United States. The software provides data backup, data recovery and deduplication features. An elevation of privilege vulnerability exists in versions prior to Unitrends Backup 10.5.5-2, which can be exploited by an...