Server side request forgery (ssrf)

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery SSRF via ZohoClient.php...

CVE-2022-47635

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery SSRF via ZohoClient.php...

CVE-2022-47635

Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery SSRF via ZohoClient.php...

CVE-2022-47635

Wildix WMS is affected by CVE-2022-47635 through SSRF via ZohoClient.php. Impacted products are Wildix WMS 6 prior to 6.02.20221216, WMS 5 prior to 5.04.20221214, and WMS4 prior to 4.04.45396.23. The underlying issue is a server-side request forgery in ZohoClient.php, allowing an attacker to caus...

CVE-2022-4272

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

Out-of-bounds

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2022-4272

CVE-2022-4272 affects FeMiner wms. An unknown functionality at the endpoint "/product/savenewproduct.php?flag=1" is vulnerable to manipulation of the parameter upfile , leading to unrestricted file upload . Exploitation can be done remotely and has been disclosed publicly. Impact is described as ...

FeMiner wms 代码问题漏洞

FeMiner wms is a repository management system for individual developers of the Chinese front-end miner FeMiner. A security vulnerability exists in FeMiner wms, which stems from some unknown functionality in the file /product/savenewproduct.php?flag=1, where the operation of the parameter upfile...

CVE-2022-4272 FeMiner wms unrestricted upload

A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The...

PT-2022-26519 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms affected versions not specified Description: A critical issue has been found in FeMiner wms, affecting some unknown functionality of the file "/product/savenewproduct.php?flag=1". The manipulation of the upfile argument leads to...

CVE-2022-34431

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

CVE-2022-34431

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

Memory corruption

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

CVE-2022-34431

CVE-2022-34431 affects Dell Hybrid Client prior to version 1.8, where a guest user profile corruption vulnerability could be exploited by a WMS-privileged attacker to render the DHC system inaccessible. Documents confirm affected software and root cause (guest profile corruption) and suggest reme...

CVE-2022-34431

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible...

Dell Hybrid Client 安全漏洞

Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. A security vulnerability previously existed in Dell Hybrid Client version 1.8, which stemmed from the inclusion of a guest user profile corruption...

PT-2022-22166 · Dell · Dell Hybrid Client

Name of the Vulnerable Software and Affected Versions: Dell Hybrid Client versions prior to 1.8 Description: The issue concerns a guest user profile corruption vulnerability. It could be exploited by a WMS privilege attacker, potentially leading to the DHC system becoming inaccessible...

CVE-2022-34428

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...

CVE-2022-34428

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...

Design/Logic Flaw

Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. An adversary with WMS group admin access could potentially exploit this vulnerability, leading to temporary denial-of-service...