2 matches found
CVE-2024-8531
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root...
7.2CVSS7.2AI score0.00459EPSS
SaveExploits0References1
PT-2019-15767
Name of the Vulnerable Software and Affected Versions Xorux Lpar2RRD versions 6.11 Stor2RRD versions 2.61 Xorux version 2.41 Description An issue was discovered where the integrity of an upgrade package is not correctly verified before processing. This allows official upgrade packages to be...
9CVSS0.02013EPSS
SaveExploits1References3
20