CVE-2020-6627

The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mvbackendlaunch in cirrus/application/helpers/mvbackendhelper.php by leveraging the "start" state and sending a checkdevicename request...

Seagate Central NAS 操作系统命令注入漏洞

Seagate Central NAS is a family of networked storage devices from Seagate. A security vulnerability exists in the Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300, which originates in the web management application that allows an attacker to exploit the "Start" state and send a...

CVE-2020-6627

The CVE-2020-6627 issue affects Seagate Central NAS devices STCG2000300, STCG3000300, and STCG4000300 where the web-management application is vulnerable to OS command injection via mv_backend_launch in cirrus/application/helpers/mv_backend_helper.php when in the "start" state and a check_device_n...

EUVD-2020-27775

The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mvbackendlaunch in cirrus/application/helpers/mvbackendhelper.php by leveraging the "start" state and sending a checkdevicename request...

Security Bulletin: Vulnerability in Bind (CVE-2021-25219) affects Power HMC

Summary BIND is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE Vulnerability Details CVEID:CVE-2021-25219 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw in response processing. By abusing a lame cache, an attacker could exploit th...

Meta Takes Down Fake Facebook and Instagram Accounts Linked to Pro-U.S. Influence Operation

Meta Platforms on Tuesday said it took down a network of accounts and pages across Facebook and Instagram that were operated by people associated with the U.S. military to spread narratives that depicted the country in a favorable light in the Middle East and Central Asia. The network, which...

Security Bulletin: Rational Asset Analyzer is vulnerable to HTTP header injection (CVE-2022-34165)

Summary IBM WebSphere Application Server Liberty used by Rational Asset Analyzer is vulnerable to HTTP header injection. This has been addressed. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server...

Ivanti Avalanche Enterprise Service Command Injection (CVE-2021-42129)

A command injection vulnerability exists in Ivanti Avalanche Enterprise Service. This vulnerability is due to insufficient validation of the Central FileStore configuration fields...

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system for small and medium-sized businesses lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system relates to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)

An SQL injection vulnerability exists in D-Link Central WiFiManager CWM-100. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

[SECURITY] Fedora 36 Update: php-pear-CAS-1.6.0-1.fc36

This package is a PEAR library for using a Central Authentication Service. Autoloader: %pearphpdir/CAS/Autoload.php...

[SECURITY] Fedora 35 Update: php-pear-CAS-1.6.0-1.fc35

This package is a PEAR library for using a Central Authentication Service. Autoloader: %pearphpdir/CAS/Autoload.php...

Fedora: Security Advisory for php-pear-CAS (FEDORA-2022-37c2d26f59)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for php-pear-CAS (FEDORA-2022-76b3530ac2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: php-pear-CAS-1.6.0-1.fc37

This package is a PEAR library for using a Central Authentication Service. Autoloader: %pearphpdir/CAS/Autoload.php...

CVE-2022-41066

Microsoft Business Central Information Disclosure Vulnerability...

CVE-2022-41066

Microsoft Dynamics Business Central Information Disclosure Vulnerability...

CVE-2022-41066

Microsoft Business Central Information Disclosure Vulnerability...

Information disclosure

Microsoft Business Central Information Disclosure Vulnerability...

CVE-2022-41066

CVE-2022-41066 affects Microsoft Dynamics 365 Business Central (on-premises) and is an information-disclosure vulnerability. Connected documents confirm multiple Microsoft hotfix updates addressing this CVE, including Update 19.13 for BC 2021 Release Wave 2, Update 21.1 for BC 2022 Release Wave 2...