4783 matches found
Authentication flaw
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
CVE-2024-0801 Unauthenticated DoS in Arcserve Unified Data Protection
A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll...
CVE-2024-0801
CVE-2024-0801 affects Arcserve Unified Data Protection (UDP) in the ASNative.dll component. The connected documents specify a denial-of-service (DoS) vulnerability exploitable in UDP versions 8.1 through 9.2, caused by issues in ASNative.dll. Reported impact is system unavailability or crashes, l...
CVE-2024-0801 Unauthenticated DoS in Arcserve Unified Data Protection
A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll...
CVE-2024-0800 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...
CVE-2024-0800
CVE-2024-0800 affects Arcserve Unified Data Protection versions 8.1–9.2. The issue is a path traversal in edge-app-base-webui.jar, specifically ImportNodeServlet, allowing traversal of filesystem paths. Impact details are consistent across sources (high severity per CVSS metrics). PT-Security not...
CVE-2024-0800 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...
CVE-2024-0799 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
CVE-2024-0799 Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
CVE-2024-0799
Arcserve UDP (Arcserve Unified Data Protection) 8.1–9.2 is affected by an authentication bypass in edge-app-base-webui.jar, specifically EdgeLoginServiceImpl.doLogin() within wizardLogin. The vulnerability enables bypassing authentication and unauthorized access. Documented impacted versions: 8.1...
PT-2024-15834
Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection versions 8.1 through 9.2 Description A denial of service issue exists in the ASNative.dll component. Recommendations For versions 8.1 through 9.2, consider restricting access to the ASNative.dll component to...
Arcserve Unified Data Protection Security Vulnerability
Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection versions 9.2 and 8.1, which stems from a denial of service vulnerability in ASNative.dll...
PT-2024-15833 · Arcserve · Arcserve Unified Data Protection
Name of the Vulnerable Software and Affected Versions: Arcserve Unified Data Protection versions 8.1 through 9.2 Description: A path traversal issue exists in the edge-app-base-webui.jar, specifically affecting the ImportNodeServlet function. This issue is present in the mentioned versions of...
Arcserve Unified Data Protection Security Vulnerability
Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection versions 9.2 and 8.1, which originates in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server. An authentication...
PT-2024-2429 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to an Information Exposure vulnerability that could result in a Security feature bypass, allowing an attacker to gain unauthorized access to sensitive...
PT-2024-2253 · Microsoft · Outlook For Android
Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Outlook for Android client. Exploitation of this issue may allow a remote attacker to gain...
Data brokers admit they’re selling information on precise location, kids, and reproductive healthcare
Information newly made available under California law has shed light on data broker practices, including exactly what categories of information they trade in. Any business that meets the definition of data broker must register with the California Privacy Protection Agency CPPA annually. The CPPA...
Guide: On-Prem is Dead. Have You Adjusted Your Web DLP Plan?
As the shift of IT infrastructure to cloud-based solutions celebrates its 10-year anniversary, it becomes clear that traditional on-premises approaches to data security are becoming obsolete. Rather than protecting the endpoint, DLP solutions need to refocus their efforts to where corporate data...
PT-2024-2625 · Unknown · Codeium-Chrome
Name of the Vulnerable Software and Affected Versions: codeium-chrome affected versions not specified Description: The issue is related to the lack of protection for service data in the codeium-chrome plugin. An attacker can exploit this to send arbitrary requests to the internal autocomplete...
