Samsung Cloud licensing issue vulnerability

Samsung Cloud is an application from Samsung, a South Korean company. Versions prior to Samsung Cloud 5.2.0 contain an authorization issue vulnerability that could be exploited by attackers to obtain sensitive information...

WordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Team plugin versions = 1.2.6. Solution Deactivate and delete. This plugin has been closed as of May 3, 2022 and is not available for download. Reason:...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. Microsoft Windows Print Spooler Components has a permissions licensing and access control issue. The following products and editions are affected:Windows 10 Version 21H1 for x64-base...

Microsoft Windows Fax Service 权限许可和访问控制问题漏洞

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify fax settings, including how to send, receive, view, and print. There is a permissions licensing and access control issue with Microsoft Windows Fax and Scan Service. The following...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery has an elevation of privilege vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery has an elevation of privilege vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

Jenkins RQM Plugin Licensing Issue Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins RQM Plugin version 2.8 and prior...

Jenkins XebiaLabs XL Release Plugin Licensing Issue Vulnerability (CNVD-2022-58430)

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins XebiaLabs XL Release Plugin...

The vulnerability of the Citrix Application Delivery Management (ADM) delivery service lies in the insufficient control over resources during its existence. This allows a malicious actor to cause a temporary interruption of the ADM licensing service.

The vulnerability of the Citrix Application Delivery Management ADM delivery management service is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to cause a temporary disruption in the ADM licensing service’s...

Security Bulletin: A Remote Attack Vulnerability in Apache Log4j affects IBM Common Licensing's License Key Server (LKS) Administration And Reporting Tool (ART) and its Agent(CVE-2021-4104,CVE-2021-44832,CVE-2021-3100,CVE-2022-33915).

Summary There is a high risk Remote Attack Vulnerability in Apache Log4j CVE-2021-4104,CVE-2021-44832,CVE-2021-3100,CVE-2022-33915 which is used by IBM LKS Administration And Reporting Tool and its Agent. A fix is available to address the vulnerability. Vulnerability Details CVEID: CVE-2022-33915...

Cisco AppDynamics Controller Authorization Issues Vulnerability

Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. Cisco AppDynamics Controller suffers from an authorization issue vulnerability that arises from incorrect authorizatio...

CVE-2022-27512

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

Citrix Application Delivery Management 资源管理错误漏洞

Citrix Application Delivery Management ADM is an application delivery management system from Citrix. The system provides features such as centralized network and application management. A resource management error vulnerability exists in Citrix Application Delivery Management, which is caused by ...

Google Android Information Disclosure Vulnerability (CNVD-2022-53383)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an information disclosure vulnerability that originates in gallery3d and photos, which could bypass licensing due to agent confusion and could be exploited by attackers to cause local information...

Microsoft Windows Defender 授权问题漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. Microsoft Windows Defender is vulnerable to a licensing issue. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for...

CVE-2022-1765

The Hot Linked Image Cacher WordPress plugin through 1.16 is vulnerable to CSRF. This can be used to store / cache images from external domains on the server, which could lead to legal risks due to copyright violations or licensing rules...

CVE-2022-1765 Hot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRF

The Hot Linked Image Cacher WordPress plugin through 1.16 is vulnerable to CSRF. This can be used to store / cache images from external domains on the server, which could lead to legal risks due to copyright violations or licensing rules...

WordPress plugin Hot Linked Image Cacher 跨站请求伪造漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Hot Linked Image Cacher version 1.16 and prior versions, which stems fro...

Spectrum Scale and IBM Elastic Storage System Licensing Issues Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improving security and management efficiency in...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an information disclosure vulnerability that originates in gallery3d and photos, which could bypass licensing due to agent confusion and could be exploited by attackers to cause local information...