Design/Logic Flaw

A PHP Local File Inclusion LFI vulnerability in the J-Web component of Juniper Networks Junos OS may allow a low-privileged authenticated attacker to execute an untrusted PHP file. By chaining this vulnerability with other unspecified vulnerabilities, and by circumventing existing attack...

CVE-2022-22246 Junos OS: PHP file inclusion vulnerability in J-Web

A PHP Local File Inclusion LFI vulnerability in the J-Web component of Juniper Networks Junos OS may allow a low-privileged authenticated attacker to execute an untrusted PHP file. By chaining this vulnerability with other unspecified vulnerabilities, and by circumventing existing attack...

CVE-2022-22246 Junos OS: PHP file inclusion vulnerability in J-Web

A PHP Local File Inclusion LFI vulnerability in the J-Web component of Juniper Networks Junos OS may allow a low-privileged authenticated attacker to execute an untrusted PHP file. By chaining this vulnerability with other unspecified vulnerabilities, and by circumventing existing attack...

CVE-2022-2052

Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full access to the system...

Code injection

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack...

PT-2022-5359 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges in the system. This allows an attacker to affect the...

PT-2022-5794 · Aruba · Aruba Edgeconnect Enterprise Orchestrator

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Orchestrator versions 9.1.x prior to 9.1.3.40197 Description: A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to ru...

PT-2022-4965 · Cisco · Cisco Enterprise Nfv Infrastructure

Name of the Vulnerable Software and Affected Versions: Cisco Enterprise NFV Infrastructure Software NFVIS affected versions not specified Description: The issue is related to insufficient cryptographic signature verification of upgrade files in the upgrade signature verification of Cisco Enterpri...

ASUS Armoury Crate Service Symbolic Link Replacement Vulnerability

ASUS Armoury Crate Service is a software utility from ASUS China designed to provide centralized control of supported ROG gaming products. An attacker could use the vulnerability to modify the log file attributes to symbolic links to arbitrary system files, causing the logging function to overwri...

Malicious code in flashloan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b318d8644a2e5f56d435a65d5df7d81c078bdf2f95b231006a90d5dc67bdb754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myapp-by-7h3n00b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8305d7f0c460e41c74b5b2a6b311aaff28d6c91fb38e3ba4b7fd43f6f28fc2ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ctct-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec8a5a02626d6709343c4d1a23bcd6e8b88e9bfc66bbe832a8cedd7c0474575 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in httsper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c091a7b57d9d262ce6c8a106b8d1171290f1501a9274efbdd93fcae75d3c3b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-self-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd641445351530f4c4b5d778e7d019fd96bdbfa32458d966344a14f465cb421f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hawaii-webchat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e497f5fb91bf8ac9ccd93a1fe5ae711c55468a84503de1c8152803c3039e70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-37879

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37878

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37882

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37880

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...

CVE-2022-37881

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...