19110 matches found
CVE-2022-22494
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940...
Design/Logic Flaw
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940...
CVE-2022-22494
CVE-2022-22494 affects IBM Spectrum Protect Operations Center versions 8.1.0.000–8.1.14. A remotely accessible information-disclosure flaw allows an attacker to obtain database details (type/version) by sending a specially crafted HTTP request, which could aid further attacks. IBM’s advisories in...
CVE-2022-22494
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940...
PT-2022-22346 · Jenkins · Jenkins Recipe Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Recipe Plugin versions 1.2 and earlier Description: The issue is related to missing permission checks in the Jenkins Recipe Plugin, allowing attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL a...
CVE-2022-34794: Missing Authorization
Missing permission checks in Jenkins Recipe Plugin 1.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML...
CVE-2022-33087: Out-of-bounds Write
A stack overflow in the function DM In fillobjbystr of TP-Link Archer C50&A5USV5200407 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2022-22494: Undefined Security Weakness
IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940...
PT-2022-15472 · Ibm · Ibm Spectrum Protect Operations Center
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Operations Center versions 8.1.0.000 through 8.1.14 Description: The issue allows a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information...
TP-LINK Archer 缓冲区错误漏洞
TP-LINK Archer C50 and TP-LINK Archer A5 are both products of China P&L TP-LINK.TP-LINK Archer C50 is a wireless router.TP-LINK Archer A5 is a wireless dual-band router. A buffer error vulnerability exists in the TP-LINK Archer C50&A5USV5200407, which originates from a stack overflow in the...
Security Bulletin: Information Disclosure in IBM Spectrum Protect Operations Center (CVE-2022-22494)
Summary IBM Spectrum Protect Operations Center may disclosure database information in error messages sent to the user which could be used in future attacks. Vulnerability Details CVEID:CVE-2022-22494 DESCRIPTION: IBM Spectrum Protect Operations Center could allow a remote attacker to gain details...
Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to several attack vectors due to its use of Apache Netty (CVE-2021-37136, CVE-2021-37137, CVE-2021-43797)
Summary Several security vulnerablities were found in the Apache Netty library used by several components in IBM Cloud Pak for Multicloud Management Monitoring. Vulnerability Details CVEID: CVE-2021-37136 DESCRIPTION: Netty netty-codec is vulnerable to a denial of service, caused by not allow siz...
Debian: Security Advisory (DSA-5170-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Scientific Linux Security Update : python on SL7.x i686/x86_64 (2022:5235)
The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5235-1 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python-urllib3: CRLF injection via HTTP request method...
CVE-2022-30562
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page...
Design/Logic Flaw
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page...
CVE-2022-30562
The CVE-2022-30562 entry describes a vulnerability in Dahua ASI7XXX devices where enabling the HTTPS function allows a MITM attacker to modify the user’s request data, injecting a malicious URL in the Host header that can trigger a 302 redirect to an attacker‑controlled page. This is evidenced by...
Bypass open redirect protection
Description I could bypass the open redirect protection on the application after parsing the redirect function using the following payload http://[email protected]/ and the payload with the link in the following...
Arbitrary template creation leading to Authenticated Remote Code Execution
Description Arbitrary File Write Reproduction Steps: 1. As a low privileged user, Create a new recipe and click on the "+" to add a New Asset. 2. Select a file, then proxy the request that will create the asset. 3. Update the values in the POST request to the ones shown below: POST...
Debian DSA-5170-1 : nodejs - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5170 advisory. - The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS in llhttp v2.1.4 and...