PT-2022-4212 · Microsoft · Windows Storage Spaces Direct +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restrictions in the Storage Spaces Direct feature of the Windows operating system. This can be exploited to elevate...

PT-2022-4203 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Storage Spaces Direct affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It is associated with unsafe privilege management in the Unified Write...

PT-2022-4301 · Microsoft · Storage Spaces Direct +1

Name of the Vulnerable Software and Affected Versions: Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restrictions in the Storage Spaces Direct feature of Windows operating systems, which can be exploited to elevate privileges. This...

Microsoft Windows Storage Spaces Controller 安全漏洞

Microsoft Windows Storage Spaces Controller is a necessary driver for providing storage space functionality from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and versions are affected:Windows 10 Version 21H2 for...

PT-2022-4210 · Microsoft · Azure Site Recovery +2

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery VMWare to Azure affected versions not specified Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restriction in the emergency recovery tool for Azure Site...

Microsoft Windows Storage Spaces Controller 安全漏洞

Microsoft Windows Storage Spaces Controller is a necessary driver for providing storage space functionality from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and editions are affected:Windows 10 Version 1809 for...

llhttp: HTTP Request Smuggling due to spaces in headers

An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this flaw to inject...

CVE-2022-31133

HumHub is an Open Source Enterprise Social Network. Affected versions of HumHub are vulnerable to a stored Cross-Site Scripting XSS vulnerability. For exploitation, the attacker would need a permission to administer the Spaces feature. The names of individual "spaces" are not properly escaped and...

CVE-2022-31133 Cross site scripting in HumHub

HumHub is an Open Source Enterprise Social Network. Affected versions of HumHub are vulnerable to a stored Cross-Site Scripting XSS vulnerability. For exploitation, the attacker would need a permission to administer the Spaces feature. The names of individual "spaces" are not properly escaped and...

llhttp: HTTP Request Smuggling due to spaces in headers

An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this flaw to inject...

Malicious Package

Overview spaces-design is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

llhttp: HTTP Request Smuggling due to spaces in headers

An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this flaw to inject...

Malicious code in spaces-reach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a237e8f4b50a9a2bba67fbd5b0fc10f1e8850b911858d33bef97d19ec615948f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6227 Malicious code in spaces-reach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a237e8f4b50a9a2bba67fbd5b0fc10f1e8850b911858d33bef97d19ec615948f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spaces-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe604e45c09dfdb8ae81eef2f85a6b920ea938592ebe27c79a7ddcb685fd7d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6226 Malicious code in spaces-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe604e45c09dfdb8ae81eef2f85a6b920ea938592ebe27c79a7ddcb685fd7d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50934)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

CVE-2022-2013

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...

CVE-2022-2013

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...

CVE-2022-2013

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...