Dell EMC Data Protection Advisor 跨站脚本漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports features such as data backup, data recovery and data replication management. Dell EMC Data Protection Advisor: A cross-site scripting vulnerability exists in versions 19.0 through 19.6,...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

Malicious code in it-advisor-webclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfdca4e07e1507b2d32c614dfcc4517d60bda8bf0f7d7a8c44c1b29e70de263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3978 Malicious code in it-advisor-webclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfdca4e07e1507b2d32c614dfcc4517d60bda8bf0f7d7a8c44c1b29e70de263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5275 Malicious code in perf-ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057927f1930660f708d0e3204041feca484630be2280431a6422382d7aa0b83b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8c509d7d761ec38d3285039a79c5137685010b03cc278bf2f4e0d376d47b61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-904 Malicious code in ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf8c509d7d761ec38d3285039a79c5137685010b03cc278bf2f4e0d376d47b61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4481907e4576323ba08381ebe46ec41756c662cf0c943c4174795e2275ca8a4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1230 Malicious code in azure-ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a69bf1f305c18fa1b7292d9c3656f6ca1818bc6fcf1575e1c0c84612554dadf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a69bf1f305c18fa1b7292d9c3656f6ca1818bc6fcf1575e1c0c84612554dadf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Pip as used by IBM QRadar Advisor With Watson is vulnerable to multiple vulnerabilities (CVE-2019-20916, CVE-2021-3572, CVE-2018-20225)

Summary Pip as used by IBM QRadar Advisor With Watson to manage python packages is vulnerable to multiple vulnerabilities. IBM QRadar Advisor With Watson has addressed the applicable CVEs by updating pip. Vulnerability Details CVEID: CVE-2019-20916 DESCRIPTION: pypa pip package for python could...

GHSA-C445-XM3F-HMFH Incorrect permission check in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to view an administrative configuration page. Health Advisor by CloudBees Plugin 3.2.1 requires Overall/Administer to view its...

Incorrect permission check in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to view an administrative configuration page. Health Advisor by CloudBees Plugin 3.2.1 requires Overall/Administer to view its...

Missing permission checks in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

GHSA-H72V-652W-XV64 Missing permission checks in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

CSRF vulnerability in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

GHSA-FC92-8R77-9297 CSRF vulnerability in Health Advisor by CloudBees Plugin

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient. Additionally, these form validation methods do not requir...

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21128

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...