Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Arc. The following products and versions are affected:Azure Guest Configuration,Azure ARC...

PT-2022-5825 · Microsoft · Azure Arc +1

Name of the Vulnerable Software and Affected Versions: Azure Guest Configuration and Azure Arc-enabled servers affected versions not specified Description: The issue is related to insufficient access controls in the Azure Guest Configuration component, which is part of the Azure Policy service an...

PT-2022-17790 · Micro Focus · Micro Focus Arcsight Logger

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger versions prior to 7.2.2 Description: The issue affects Micro Focus ArcSight Logger, where potential vulnerabilities could be remotely exploited, resulting in Information Disclosure or Self Cross-Site Scripting XSS...

Security update for nim (important)

openSUSE Security Update: Security update for nim Announcement ID: openSUSE-SU-2022:10101-1 Rating: important References: 1175332 1175333 1175334 1181705 1185083 1185084 1185085 1185948 1192712 Cross-References: CVE-2020-15690 CVE-2020-15692 CVE-2020-15693 CVE-2020-15694 CVE-2021-21372...

CVE-2022-2569 ARC Informatique PcVue

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users...

OPENSUSE-SU-2022:10095-1 Security update for nim

This update for nim fixes the following issues: Includes upstream security fixes for: boo1175333, CVE-2020-15693 httpClient is vulnerable to a CR-LF injection boo1175334, CVE-2020-15692 mishandle of argument to browsers.openDefaultBrowser boo1175332, CVE-2020-15694 httpClient.get.contentLength...

The vulnerability of the Azure Arc Jumpstart application, related to the disclosure of information through registration files, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Azure Arc Jumpstart application relates to the disclosure of information through registration files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ARC Informatique PcVue

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: ARC Informatique Equipment: PcVue Vulnerability: Cleartext Storage of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access the OAuth web service database...

ARC Informatique PcVue 安全漏洞

ARC Informatique PcVue is a multi-functional HMI-SCADA software from ARC Informatique, an all-in-one solution that monitors all aspects of a customer's assets.PcVue is used in a wide range of applications such as industrial control, building management, energy management, smart grid, energy...

ARC Informatique PcVue (Update A)

Skip to main content Toolbar items Manage Administration menu Tools Extend Tools Content Extend Content Structure Configuration Extend Configuration Help Horizontal orientation dgloria Edit ICS Advisory ARC Informatique PcVue Update A Primary tabs View Editactive tab Delete Revisions Breadcrumb...

arc-novavista2.fr.sicobranaja.fr Cross Site Scripting vulnerability OBB-2838683

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

All Vulnerabilities for arc-cofr.mas.nasa.gov Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Azure Arc Jumpstart Information Disclosure Vulnerability

...

PT-2022-4401 · Microsoft · Azure Arc Jumpstart

Name of the Vulnerable Software and Affected Versions: Azure Arc Jumpstart affected versions not specified Description: The issue is related to an information disclosure vulnerability through registration files. Exploitation of this issue may allow an attacker to gain unauthorized access to...

Microsoft Azure 日志信息泄露漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A log information disclosure vulnerability exists in Microsoft Azure Arc Jumpstart. No information about this vulnerability is available at this time, so stay tuned ...

KLA12591 OSI vulnerability in Microsoft Azure

An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2022-35798 Related products Microsoft-Azure CVE list CVE-2022-35798 warning KB list Solution Install necessary updates from...

MAL-2022-1080 Malicious code in arc-canonical (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acfcbeeca7582039a86ab0c90905592c60039b3baa27c891d73885284377ce06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arc-canonical (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acfcbeeca7582039a86ab0c90905592c60039b3baa27c891d73885284377ce06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

arc-en-flex.fr Cross Site Scripting vulnerability OBB-2694686

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-4565 Malicious code in meshblu-connector-arc-thermometer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f1869e723aea9d866700e89b3eaa39a2866762e0d10d4bebe7419833a14567e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...