10642 matches found
CVE-2022-35865
This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
CVE-2022-35866
This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MySQL server. The server uses a hard-cod...
CVE-2022-28684
This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation of...
Authentication flaw
This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MySQL server. The server uses a hard-cod...
Authorization
This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of Virtual Metrics. The issue results from the lack of proper validation of ...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Deserialization of untrusted data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation of...
Stack overflow
This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the e1000 virtual devic...
Design/Logic Flaw
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results from the lack of proper validation of a...
CVE-2022-35867
This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the e1000 virtual devic...
CVE-2022-35867
This CVE (CVE-2022-35867) affects xhyve’s e1000 virtual device. The root cause is improper validation of the length of user-supplied data before copying to a stack-based buffer, enabling local privilege escalation and arbitrary code execution in the hypervisor context. Documented in ZDI-22-949, w...
CVE-2022-35865
CVE-2022-35865 affects BMC Track-It! 20.21.2.109. The vulnerability arises from improper access control in the HTTP module’s authorization, enabling remote code execution in the service account context without authentication. It is linked to ZDI-CAN-16709. Public advisories note fixes in Track-It...
EUVD-2022-38738
This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...
CVE-2022-35864
This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...
CVE-2022-35864
This CVE affects BMC Track-It! version 20.21.02.109. The vulnerability is an SQL injection in the GetPopupSubQueryDetails endpoint caused by insufficient validation of a user-supplied string used to build queries, enabling disclosure of stored credentials. Exploitation requires authentication. Pu...
CVE-2022-34872
CVE-2022-34872 affects Centreon and concerns an SQL injection vulnerability in the Virtual Metrics processing path. The root cause is insufficient validation of a user-supplied string used to build SQL queries, enabling an authenticated, remote attacker to disclose stored credentials. The issue i...
CVE-2022-34872
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of Virtual Metrics. The issue results from the lack of proper validation of ...
CVE-2022-34871
CVE-2022-34871 is a SQL injection in Centreon’s poller resources. It requires authentication and allows an attacker to escalate privileges to administrator by abusing unsanitized user input used to build SQL queries. Root cause: lack of validation of a user-supplied string in poller configuration...
CVE-2022-34871
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of poller resources. The issue results from the lack of proper validation of a...