The vulnerability of the executable file Veeam.Backup.Service.exe allows a hacker to gain unauthorized access to systems that use Veeam Backup & Replication for cloud, virtual, and physical systems protection.

The vulnerability of the Veeam.Backup.Service.exe executable, a component of the Veeam Backup & Replication solution, involves a lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the system...

The vulnerability of the setTaskEditorItem component in the centralized network device and port management system Advantech iView allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the setTaskEditorItem component in the Centralized Network Devices and Ports Management System of Advantech iView relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the Cisco Software-Defined Application Visibility and Control (SD-AVC) function in the centralized network management system, the Cisco Catalyst SD-WAN Manager, allows a intruder to gain unauthorized access to the system.

The vulnerability of the Cisco Software-Defined Application Visibility and Control SD-AVC function in the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to the lack of authentication for this critical function. Exploiting this vulnerability could allow a maliciou...

CVE-2022-29833

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users could access to MELSEC safety CPU modules illgally...

NEC Expresscluster X 安全漏洞

NEC Expresscluster X is a specialized high availability cluster software from Nippon Electric NEC. It is used to enable fast restore functions and continuously protect critical applications and data. A security vulnerability exists in NEC Expresscluster X 5.0 for Windows and prior versions,...

Zyxel CloudCNM SecuManager 安全漏洞

Zyxel ZyXEL CloudCNM SecuManager is a set of network management software from Zyxel, Taiwan, China. Zyxel CloudCNM SecuManager ejabberd has a hard-coded vulnerability that can be exploited by remote attackers to submit special requests for unauthorized access to the application system...

Zyxel CloudCNM SecuManager 安全漏洞

Zyxel ZyXEL CloudCNM SecuManager is a suite of network management software from Zyxel Taiwan, China. Zyxel CloudCNM SecuManager suffers from axiros default account vulnerability, which can be exploited by remote attackers to submit a special request for unauthorized access to the system...

CVE-2022-28812

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain SuperUser access to the device...

Company Website CMS 访问控制错误漏洞

Company Website CMS is a company website/CMS by Torrahclef Individual Developer. Company Website CMS 1.0 suffers from an Access Control Error vulnerability that stems from an unknown function of the file /dashboard/settings being affected, resulting in incorrect authentication and an attack that...

The vulnerability of the Common Gateway Interface (CGI) interface of microprogrammed network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN allows attackers to gain unauthorized access to protected information.

The vulnerability of the Common Gateway Interface CGI interface of microprogrammed network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow a malicious actor, operating...

CVE-2022-28622

CVE-2022-28622 affects HPE StoreOnce Software. The SSH server supports weak key exchange algorithms, enabling potential remote unauthorized access. A fix is available in HPE StoreOnce Software 4.3.2. Affected product: HPE StoreOnce Software. Remediation: upgrade to version 4.3.2 (or apply the ven...

HPE StoreOnce 加密问题漏洞

HPE StoreOnce is a cloud backup data protection system from Wise and Technology HPE. A security vulnerability exists in HPE StoreOnce that stems from the SSH server's support for weak key exchange algorithms, which could lead to remote unauthorized access...

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications application in the Oracle E-Business Suite system, which allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications application in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized acces...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to access control deficiencies, allows a perpetrator to gain unauthorized access to limited functions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to limited functions through the REST API...

The vulnerability of the microprogrammed software of the MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ programmable logic controllers lies in the unencrypted storage of user data, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogrammed logic controllers MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ lies in the unencrypted storage of account data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2022-2902 · Microsoft · Ms Lync +1

Name of the Vulnerable Software and Affected Versions: Skype for Business Server affected versions not specified Description: The vulnerability is related to a lack of protection for service data in Skype for Business Server, which can allow a remote attacker to gain unauthorized access to...

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to the use of pre-installed credentials, allows a intruder to gain unauthorized access to protected information.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software relates to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.

The vulnerability of the DNN CMS system is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2021-20599

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a...