RHSA-2017:1259 Red Hat Security Advisory: spacewalk-backend security update

Bulletin has no description...

PT-2024-9770 · Unknown · @Backstage/Plugin-Techdocs-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-techdocs-backend versions prior to 1.10.13 Description: The issue allows an attacker with control of the TechDocs storage buckets to inject executable scripts in the TechDocs content. These scripts will be executed in the...

Logic flaw vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-41275)

UFIDA U8CRM is a professional enterprise-level CRM software. A logic flaw vulnerability exists in UFIDA U8CRM, which can be exploited by an attacker to log in to the backend and obtain sensitive information...

Veeam Data Cloud for Microsoft Azure Release Information and Build Numbers

You are viewing an archived changelog for Veeam Data Cloud for Microsoft Azure. Changelog information has moved to a dedicated webpage, where you can find updates for all Veeam Data Cloud workloads in one place. Click here to visit the new changelog. This KB article lists all versions of Veeam Da...

RHSA-2012:0436 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Bulletin has no description...

RHSA-2012:0102 Red Hat Security Advisory: Red Hat Network Proxy spacewalk-backend security and bug fix update

Bulletin has no description...

RHSA-2012:0101 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security and bug fix update

Bulletin has no description...

RHSA-2019:1663 Red Hat Security Advisory: spacewalk-backend and spacewalk-proxy security update

Bulletin has no description...

RHSA-2013:0848 Red Hat Security Advisory: Red Hat Network Satellite spacewalk-backend security update

Bulletin has no description...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...

CVE-2024-45323

CVE-2024-45323 affects FortiEDR Manager API versions 6.0 through 6.2.2. The root cause is improper access control (CWE-284) that, in a shared environment, allows an authenticated admin with REST API permissions (restricted to a single organization) to access backend logs containing information re...

Fedora: Security Advisory (FEDORA-2024-9974808629)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ELADMIN 安全漏洞

ELADMIN is a backend management system for elunez personal developers. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which stems from vulnerability to cross-site scripting XSS attacks and allows attackers to execute arbitrary code via LocalStoreController.java...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

PT-2024-9764 · Npm · @Backstage/Plugin-Catalog-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-catalog-backend versions prior to 1.26.0 Description: A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed can interrupt the service using a specially crafted query to...