PT-2023-19032

Name of the Vulnerable Software and Affected Versions Acronis Snap Deploy Windows versions before build 3900 Description The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. Recommendations For Acronis Snap Deploy Windows versions before build 3900, update to...

Acronis Snap Deploy code-related vulnerabilities

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A security vulnerability exists in Acronis Snap Deploy versions prior to 3900. An attacker could exploit the vulnerability to elevate privileges...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vul...

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

Input validation

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

CVE-2022-2507

Technical details about CVE-2022-2507 are not publicly available in the provided documents; monitor official advisories and vendor updates for further information.

Octopus Deploy security vulnerability

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the ability to render user-supplied input to a web page...

CVE-2022-2507: Improper Neutralization of Input During Web Page Generation

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

PT-2023-12778

Name of the Vulnerable Software and Affected Versions Octopus Deploy affected versions not specified Description The issue allows user-supplied input to be rendered into the webpage in affected versions of the software. Recommendations At the moment, there is no information about a newer version...

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

CVE-2022-2507

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

org.eclipse.jetty:jetty-ajp (7.0.0.m0), org.eclipse.jetty:jetty-annotations (7.0.0.m0) +13 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (7.0.0.m0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty:jetty-ajp 7.0.0.m0 - org.eclipse.jetty:jetty-annotations 7.0.0.m0 -...

CVE-2023-24527

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

CVE-2023-24527

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

CVE-2023-24527 Improper Access Control in SAP NetWeaver AS Java for Deploy Service

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

CVE-2023-24527

CVE-2023-24527 affects SAP NetWeaver AS Java for Deploy Service (v7.5). The issue is improper access control: an unauthenticated remote attacker can attach to an open interface and use an open naming/directory API to access a service. This access disclosure does not modify server settings or data...

CVE-2023-24527: Missing Authentication for Critical Function

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will...

SAP NetWeaver AS Access Control Vulnerability

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. An access control error vulnerability exists in SAP NetWeaver AS Java for Deploy Service version 7.5, which stems from not performing any access contr...

Security Bulletin: IBM UrbanCode Deploy (UCD) could disclose sensitive password information if a manual edit of the agentrelay.properties file. (CVE-2022-43877)

Summary After a local edit of an agentrelay.properties configuration file using a plain text value, the value may not automatically be encrypted as expected after restarting the service. Vulnerability Details CVEID:CVE-2022-43877 DESCRIPTION: IBM UrbanCode Deploy UCD could disclose sensitive...