CVE-2021-4158 affecting package qemu for versions less than 6.2.0-7

CVE-2021-4158 affecting package qemu for versions less than 6.2.0-7. A patched version of the package is available...

CVE-2022-24952

Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket...

Denial of service

Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket...

Race condition

A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...

CVE-2022-24949

A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen...

CVE-2022-24952

Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket...

Design/Logic Flaw

A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request...

CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5

CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5. A patched version of the package is available...

CVE-2021-4206 affecting package qemu for versions less than 6.2.0-4

CVE-2021-4206 affecting package qemu for versions less than 6.2.0-4. A patched version of the package is available...

CVE-2021-3638 affecting package qemu for versions less than 6.2.0-2

CVE-2021-3638 affecting package qemu for versions less than 6.2.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-4145 affecting package qemu for versions less than 6.2.0-2

CVE-2021-4145 affecting package qemu for versions less than 6.2.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-3930 affecting package qemu for versions less than 6.2.0-2

CVE-2021-3930 affecting package qemu for versions less than 6.2.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-3748 affecting package qemu for versions less than 6.2.0-2

CVE-2021-3748 affecting package qemu for versions less than 6.2.0-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-20257 affecting package qemu for versions less than 6.2.0-2

CVE-2021-20257 affecting package qemu for versions less than 6.2.0-2. An upgraded version of the package is available that resolves this issue...

IBM Sterling Partner Engagement Manager信息泄露漏洞

IBM Sterling Partner Engagement Manager is an automated management tool from IBM Corporation. IBM Sterling Partner Engagement Manager version 6.2.0 is vulnerable to an information disclosure vulnerability that could be exploited by a remote, authenticated attacker to obtain sensitive information ...

IBM Sterling Partner Engagement Manager权限提升漏洞

IBM Sterling Partner Engagement Manager is an automated management tool from IBM Corporation. IBM Sterling Partner Engagement Manager version 6.2.0 contains an elevation of privilege vulnerability that could be exploited by attackers to elevate privileges and perform unexpected operations on othe...

PT-2022-15370 · Ibm · Ibm Sterling Partner Engagement Manager

Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager version 6.2.0 Description: The issue allows a remote authenticated attacker to obtain sensitive information or modify user details due to an insecure direct object vulnerability IDOR. Recommendations: F...

IBM Sterling Partner Engagement Manager安全漏洞

IBM Sterling Partner Engagement Manager is an automated management tool from IBM Corporation. IBM Sterling Partner Engagement Manager version 6.2.0 contains an elevation of privilege vulnerability that could be exploited by attackers to elevate privileges and perform unexpected operations on othe...

CVE-2022-22328

IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871...

Palo Alto Network Cortex XSOAR 跨站脚本漏洞

Palo Alto Networks Cortex Xsoar is a Security Orchestration Automation and Response Soar platform from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks Cortex XSOAR that allows an attacker to store a persistent javascript exploit code that could lead to t...