Managed Veeam Backup Agents are offline after Veeam Service Provider Console upgrade

Challenge After upgrading Veeam Service Provider Console, all Veeam Management Agents are listed as offline. Cause This may be caused by an incorrect security certificate configuration, which leads to the disconnection of the management agent on the Veeam Cloud Connect server after the upgrade. S...

Eclipse Theia Cross-Site Scripting Vulnerability

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...

Apache ActiveMQ message.jsp Cross-Site Scripting (CVE-2020-13947)

A cross-site scripting vulnerability exists in Apache ActiveMQ. The vulnerability is due to insufficient validation of a parameter in the web console...

Weak Password Vulnerability in KEDACOM Network Keyboard Console at Suzhou KEDA Technology Co.

Ltd. is a provider of video and security products and solutions. A weak password vulnerability exists in the KEDACOM Network Keyboard Console of Suzhou KEDA Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Veeam Service Provider Console v5 Patch 2

This patch has been superseded by Veeam Service Provider Console v5 Patch 3. Requirements Please confirm you are running version5.0.0.6726 or later before installing Patch 2. You can check this by logging in to the backup portal and navigating to the Configuration Support Information tab. After...

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

Code injection

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

CVE-2021-28161

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...

Weak Password Vulnerability in Hangzhou CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. A weak password vulnerability exists in the Hangzhou...

Eclipse Theia 跨站脚本漏洞

Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...

File Containment Vulnerability in Hangzhou New CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. A file inclusion vulnerability exists in the Hangzho...

Weak Password Vulnerability in Network Keyboard Console at Suzhou Kodak Technology Co.

KEDACOM is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help governments and enterprises to solve the visual communication and management challenges. A weak password vulnerabilit...

CVE-2020-19419

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication...

Authentication flaw

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication...

Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...

EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2021-1454)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In cdevget of chardev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of...

PT-2021-10347 · Emerson · Emerson Smart Wireless Gateway 1420

Name of the Vulnerable Software and Affected Versions: Emerson Smart Wireless Gateway 1420 version 4.6.59 Description: The issue allows remote attackers to obtain sensitive device information from the administrator console without authentication. This is due to incorrect access control...

Acronis Cyber Protect Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an application. Acronis Cyber Protect 15 Update 1 build 26172 has a cross-site scripting vulnerability that stems from cross-site scripting XSS in the console. . No detailed vulnerability details are available at this time...