Lucene search
+L

10048 matches found

Citrix
Citrix
•added 2022/03/14 12:00 a.m.•16 views

CVAD Setup Wizard Fails To Complete When Using Citrix Cloud - Index Was Out Of Range

Running the Provisioning Services CVAD Setup Wizard to create or add new machines to a Citrix Cloud catalog fails to create the devices. Upon clicking finish, after specifying wizard parameters, the wizard closes and the following error appears: Error: Index was out of range. Must be non-negative...

7AI score
SaveExploits0
osv_cve
osv_cve
•added 2022/03/10 5:47 p.m.•19 views

CVE-2022-26778

Veritas System Recovery VSR 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration. This could allow a Windows user who has sufficient privileges to access a network file system that they were not authorized to access...

6.5CVSS5.8AI score0.0044EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/10 5:47 p.m.•17 views

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

7.4CVSS7.2AI score0.01495EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/03/10 5:47 p.m.•26 views

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

7.4CVSS7.2AI score0.01495EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/10 5:47 p.m.•33 views

Improper access control

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

5.8CVSS7.6AI score0.01495EPSS
SaveExploits1References1Affected Software5
NVD
NVD
•added 2022/03/10 5:46 p.m.•45 views

CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

4.6CVSS0.00107EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/03/10 5:46 p.m.•23 views

CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

4.6CVSS5.8AI score0.00107EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/10 5:46 p.m.•15 views

CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

4.6CVSS5.8AI score0.00107EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/10 5:46 p.m.•39 views

Input validation

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

2.1CVSS4.6AI score0.00107EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•24 views

Samsung Setup wizard process安全漏洞

The Samsung Setup wizard process is an installation setup wizard from Samsung South Korea. A security vulnerability exists in the Samsung Setup wizard process that stems from improper protection of alternate paths during the installation wizard process, allowing an attacker to install the securit...

4.6CVSS5.1AI score0.00107EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/08 1:46 p.m.•124 views

CVE-2022-24932

The CVE-2022-24932 entry concerns Samsung Setup wizard: an Improper Protection of Alternate Path vulnerability in the Setup wizard process allows a physical attacker to install packages before the wizard completes. Affected versions are Setup wizard versions prior to SMR Mar-2022 Release 1. The u...

4.6CVSS4.5AI score0.00107EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/08 1:46 p.m.•60 views

CVE-2022-24932

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

4.2CVSS4.8AI score0.00107EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/08 12:00 a.m.•23 views

PT-2022-16994 · Unknown · Setupwizard

Name of the Vulnerable Software and Affected Versions: Setup wizard versions prior to SMR Mar-2022 Release 1 Description: The issue is related to an Improper Protection of Alternate Path vulnerability in the Setup wizard process. This vulnerability allows a physical attacker to install packages...

4.6CVSS4.3AI score0.00107EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/08 12:00 a.m.•9 views

CVE-2022-24932: Improper Protection of Alternate Path

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

4.6CVSS5.6AI score0.00107EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/03/07 9:47 p.m.•55 views

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

7.8AI score0.01495EPSS
SaveExploits1References1
Citrix
Citrix
•added 2022/03/07 12:00 a.m.•19 views

What steps are needed to configure new StoreFront servers with an existing Gateway and Store URL

The objective of this article is to provide the recommended steps at a high level in order to configure two new StoreFront servers to work with an existing Gateway virtual server that utilizes an URL created with an old set of StoreFront servers...

7AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
•added 2022/03/02 5:29 p.m.•37 views

InsightAppSec GitHub Integration Keeps Risky Code From Reaching Production

We've all been there. The software development life cycle SDLC is moving at a mile a minute. Developers are writing code, updating features, and all the while attempting to keep everything introduced into production as safe and secure as possible. GitHub Actions are essential to automation and...

0.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•3 views

PT-2025-8045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the ill acc of setup function related to the MIPS architecture and Ralink setup. The issue arises when pdev...

5.5CVSS0.00259EPSS
SaveExploits0References24
NVD
NVD
•added 2022/02/28 9:15 a.m.•38 views

CVE-2021-24803

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

8.8CVSS0.00628EPSS
SaveExploits2References1
CVE
CVE
•added 2022/02/28 9:06 a.m.•109 views

CVE-2021-24803

The CVE-2021-24803 entry concerns the WordPress plugin Core Tweaks WP Setup (versions

8.8CVSS8.7AI score0.00628EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder