Veritas System Recovery安全漏洞

Veritas System Recovery is a system recovery software from Veritas, USA. The software provides Windows systems with the ability to recover a corrupted system without reinstalling the system. A security vulnerability exists in Veritas System Recovery VSR 18 and 21, which originates from storing...

Apache Spark 加密问题漏洞

Apache Spark is a multilingual engine for performing data engineering, data science, and machine learning on a single-node machine or cluster. Apache Spark is vulnerable to an encryption issue that stems from the program's use of a custom mutual authentication protocol that allows fully encrypted...

PT-2022-10712 · Apache · Apache Spark

Name of the Vulnerable Software and Affected Versions: Apache Spark versions 3.1.2 and earlier Description: Apache Spark supports end-to-end encryption of RPC connections via spark.authenticate and spark.network.crypto.enabled. In affected versions, it uses a bespoke mutual authentication protoco...

Default credentials

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...

CVE-2022-24744

CVE-2022-24744 – Shopware Affected: Shopware (open commerce platform based on Symfony and Vue) where, in affected versions, user sessions remain active after a password reset via the recovery flow. Root cause (as described in security docs): insufficient session expiration management allowing a u...

CVE-2022-24744 Insufficient Session Expiration in shopware

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...

CVE-2022-24520

Azure Site Recovery Remote Code Execution Vulnerability...

CVE-2022-24519

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24520

Azure Site Recovery Remote Code Execution Vulnerability...

CVE-2022-24519

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24520

Azure Site Recovery Remote Code Execution Vulnerability...

CVE-2022-24519

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24518

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24515

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24517

Azure Site Recovery Remote Code Execution Vulnerability...

CVE-2022-24515

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24506

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24518

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24506

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24517

Azure Site Recovery Remote Code Execution Vulnerability...