CVE-2022-32757: Improper Restriction of Excessive Authentication Attempts

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 228510...

CVE-2022-33163: Incorrect Permission Assignment for Critical Resource

IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571...

va-motorsport.com Cross Site Scripting vulnerability OBB-3323826

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-13378

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...

PT-2023-11472

Name of the Vulnerable Software and Affected Versions Loadbalancer.org Enterprise VA MAX versions 8.3.8 and earlier Description The web-services interface could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to...

CVE-2020-13378

CVE-2020-13378 affects Loadbalancer.org Enterprise VA MAX up to version 8.3.8. The issue is an OS command injection in the appliance that could allow a remote authenticated attacker to execute arbitrary code. CVSS v3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileg...

PT-2023-11473 · Loadbalancer.Org · Loadbalancer.Org Enterprise Va Max

Name of the Vulnerable Software and Affected Versions: Loadbalancer.org Enterprise VA MAX versions 8.3.8 and earlier Description: The issue allows a remote authenticated attacker to execute arbitrary code due to an OS Command Injection vulnerability. Recommendations: For versions 8.3.8 and earlie...

Loadbalancer Enterprise VA MAX 操作系统命令注入漏洞

Loadbalancer Enterprise VA MAX is a full-featured virtual ADC from the Loadbalancer organization. standardized on WAF and GSLB, it provides the highest throughput and unmatched reliability for critical workloads. A security vulnerability exists in Loadbalancer Enterprise VA MAX version 8.3.8 and...

CVE-2020-13377: Improper Limitation of a Pathname to a Restricted Directory

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files...

CVE-2020-13378

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...

CVE-2020-13378: Improper Neutralization of Special Elements used in an OS Command

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...

Hive Pro Appoints John Lyons as Chief Revenue Officer

Milpitas, CA – 27th March 2023 – Hive Pro, a leading Threat Exposure Management vendor in cybersecurity, today announced the appointment of John Lyons as its new Chief Revenue Officer CRO. With more than 25 years of sales management experience in the IT industry, Lyons will be responsible for...

PT-2024-14660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when the number of cpu cores is adjusted to an odd number, causing the zone size to become an odd number. This leads to the address of certain zones being mapped to...

Flaw in the VA Medical Records Platform May Put Patients at Risk

The Veterans Affairs’ VistA software has a vulnerability that could let an attacker “masquerade as a doctor,” a security researcher warns...

horizonsedgeva.com Cross Site Scripting vulnerability OBB-2740612

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-29337

C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...

PT-2022-19551 · Unknown · C-Data Fd702Xw-X-R430

Name of the Vulnerable Software and Affected Versions: C-DATA FD702XW-X-R430 version 2.1.13 X001 Description: A command injection issue was discovered, allowing attackers to execute arbitrary commands via a crafted HTTP request. This is achieved through the va cmd parameter in the formlanipv6...

GSD-2022-1001263 ASoC: codecs: va-macro: fix accessing array out of bounds for enum type

ASoC: codecs: va-macro: fix accessing array out of bounds for enum type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For...