CVE-2022-27563 Overload/denial of service affects HCL VersionVault Express

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

PT-2022-18486 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. Recommendations: At the moment, there is no information about a newer...

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service...

Cross site scripting

Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter...

CVE-2022-35654

Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter...

CVE-2022-35654

CVE-2022-35654 affects Pegasystem PEGA Platform (versions 8.5.4–8.7.3). The issue is an unauthenticated cross-site scripting (XSS) vulnerability triggered via the redirect parameter. Red Hat and other sources corroborate the XSS finding; public details specify impacted versions and the vulnerable...

DoS via Client Email Update

Description An unauthenticated user, via the Inbox Website Widget, can update its contact email information, whose field doesn't have any proper size restriction or limitation in place, allowing to set as email an unlimited number of characters. \ \ Because of this an attacker can send an enormou...

Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Deletion

The plugin does not have any authorisation and CSRF checks in place when deleting events which could allow unauthenticated attackers to delete arbitrary events As an unauthenticated user, open the code below, this will delete the event with ID 4 from the calendar with ID 1...

Improper access control

Improper access control in firmware for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2022-21212

Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-21197

Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-21139

Inadequate encryption strength for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

Input validation

Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access...

Cross site scripting

Out of bounds read for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-30296

Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...

CVE-2022-21197

Improper input validation for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2021-23168

Out of bounds read for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-23168

Out of bounds read for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2022-2264)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that...

Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS

The plugin does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fields. This could allow unauthenticated attackers to create arbitrary events and put Cross-Site Scripting payloads in it. As an...