Vulnerability fixed in Dell Repository Manager

Dell has fixed a vulnerability in Repository Manager. A local malicious person could exploit the vulnerability to execute arbitrary code on the underlying operating system. The vulnerability can be exploited during the installation of systems. Dell has released updates to fix the vulnerability in...

WEIPDCRM 跨站脚本漏洞

WEIPDCRM is a Cydia repo manager open-sourced by 82Flex. A cross-site scripting vulnerability exists in WEIPDCRM. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Malicious Package

Overview git-repo-manager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

The vulnerability of Sonatype Nexus Repository Manager relates to insecure management of privileges, allowing a perpetrator to execute arbitrary code.

The vulnerability of Sonatype Nexus Repository Manager is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

HPE Version Control Repository Manager Elevation of Privilege Vulnerability

HPE Version Control Repository Manager is a version control repository manager from Wise and Technology HPE. An elevation of privilege vulnerability exists in HPE Version Control Repository Manager versions prior to 7.6.14.0, which stems from an incorrectly programmed call to an advanced local...

CVE-2022-28619

A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager install...

CVE-2022-28619

The CVE-2022-28619 issue affects the HPE Version Control Repository Manager installer. Affected component: the VCRM installer (version 7.6.14.0 fixes the vulnerability). Root cause: an incorrectly programmed call to an advanced local procedure leads to an elevation of privilege. Impact: local esc...

Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

GHSA-HMJV-PX3J-933C Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

Dell EMC Password Storage Vulnerability

Dell EMC is a repository manager. A plain text password storage vulnerability exists in Dell EMC. A local attacker could exploit this vulnerability to cause the disclosure of certain user credentials. An attacker could use this vulnerability to be able to use publicly available credentials to...

CVE-2022-26856

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

Design/Logic Flaw

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

CVE-2022-26856

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

CVE-2022-26856

Dell EMC Repository Manager (version 3.4.0) contains a plain-text password storage vulnerability. A local attacker could disclose credentials and use them to access the vulnerable application's database with privileges of the compromised account. The available documents do not specify exploit cod...

DELL EMC Repository Manager 安全漏洞

Dell EMC is a repository manager. A plain text password storage vulnerability exists in Dell EMC. A local attacker could exploit this vulnerability to cause the disclosure of certain user credentials. An attacker could use this vulnerability to be able to use publicly available credentials to...

CVE-2022-26856

Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable...

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

Server side request forgery (ssrf)

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

CVE-2022-27907

CVE-2022-27907 affects Sonatype Nexus Repository Manager 3.x before 3.38.0, with an SSRF vulnerability. Connected documents describe a code issue that forces the server to send a query request, enabling SSRF. Exploitation details are not provided in the sources; no in‑the‑wild exploit data is sta...