PT-2023-2041 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue is related to a Directory Traversal Vulnerability in the SolarWinds Platform, which allows a local adversary with authenticated account access to edit the default...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that stems from vulnerability to deserialization of untrustworthy data, allowing a remote attacker with...

SolarWinds Platform 路径遍历漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform has a security vulnerability that stems from susceptibility to a directory traversal vulnerability, which can be exploited by an authenticated, local...

EulerOS 2.0 SP10 : emacs (EulerOS-SA-2023-1382)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c us...

CVE-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...

Malicious code in python-statface-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a7521acfc06ff8a2343608ac29b76d6e30bd42edc43de78f47282a5cf65ce9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qb2-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccaba51ce2f483353a479caa2c736c3ae023bf6b83eace0030e7e1853d3605bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon Linux 2022 : emacs, emacs-common, emacs-devel (ALAS2022-2023-277)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2023-277 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation o...

MailEnable 路径遍历漏洞

MailEnable is a Windows-based commercial e-mail server from MailEnable Australia. A security vulnerability exists in MailEnable versions 10.41, 9.84, and 8.65 and earlier. An attacker could exploit the vulnerability to store arbitrary code on a file and execute arbitrary commands...

aEnrich a+HRD 授权问题漏洞

aEnrich a+HRD is a full-service human resources development solution from aEnrich, Inc. A security vulnerability exists in aEnrich a+HRD that stems from an incorrect login authentication feature in its a+HRD allowing an unauthenticated, remote attacker to bypass authentication and gain access to...

CVE-2022-34672

NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the software by gaining privileges, reading sensitive information, or executing commands...

NVIDIA Control Panel 安全漏洞

NVIDIA Control Panel is a graphics card control panel from NVIDIA Corporation. A security vulnerability exists in NVIDIA Control Panel, which originated when an unauthorized or unprivileged user can compromise the security of the software by obtaining privileges, reading sensitive information, or...

CVE-2022-44620

Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...

PT-2022-27538 · Unknown · Lazy Mouse Server

Name of the Vulnerable Software and Affected Versions: Lazy Mouse server affected versions not specified Description: The issue allows remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands due to weak password requirements and the lack of rate...

CVE-2022-36964

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-44037

An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform that stems from vulnerability to deserialization of untrustworthy data and allows a remote attacker with valid access...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

TIBCO Software Spotfire Server 跨站脚本漏洞

TIBCO Software Spotfire Server is a suite of TIBCO Spotfire data analytics and mining tools based platforms from TIBCO Software, Inc. that provide integration, operation and management for organizations. A security vulnerability exists in TIBCO Spotfire Analyst, TIBCO Spotfire Desktop, and TIBCO...